[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 57.665630][ T26] audit: type=1800 audit(1573979498.900:25): pid=8756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 57.708665][ T26] audit: type=1800 audit(1573979498.910:26): pid=8756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 57.750375][ T26] audit: type=1800 audit(1573979498.910:27): pid=8756 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.15.238' (ECDSA) to the list of known hosts. 2019/11/17 08:31:48 fuzzer started 2019/11/17 08:31:50 dialing manager at 10.128.0.26:42171 2019/11/17 08:31:50 syscalls: 2566 2019/11/17 08:31:50 code coverage: enabled 2019/11/17 08:31:50 comparison tracing: enabled 2019/11/17 08:31:50 extra coverage: extra coverage is not supported by the kernel 2019/11/17 08:31:50 setuid sandbox: enabled 2019/11/17 08:31:50 namespace sandbox: enabled 2019/11/17 08:31:50 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/17 08:31:50 fault injection: enabled 2019/11/17 08:31:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/17 08:31:50 net packet injection: enabled 2019/11/17 08:31:50 net device setup: enabled 2019/11/17 08:31:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/17 08:31:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 08:34:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xde, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e0000002f00815be00f80ecdb4cb90409486516080003001400000012000014c2ed3c001500cd5edc2976d153b4", 0x2e}], 0x1}, 0x0) 08:34:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x6}}], 0x834e7301) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x0, 0x1, 'w'}], 0x18}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x7, @media='eth\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x10181) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f00000000c0)={0x0, 0x81, 0xe3e}) recvmmsg(0xffffffffffffffff, &(0x7f0000008ec0), 0x1, 0x0, 0x0) syzkaller login: [ 241.232046][ T8923] IPVS: ftp: loaded support on port[0] = 21 [ 241.445495][ T8923] chnl_net:caif_netlink_parms(): no params data found [ 241.461613][ T8925] IPVS: ftp: loaded support on port[0] = 21 [ 241.515378][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.525570][ T8923] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.535152][ T8923] device bridge_slave_0 entered promiscuous mode [ 241.553627][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state 08:34:42 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x12, 0x9, 0x4, 0x8c8}, 0x3c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) [ 241.560936][ T8923] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.569083][ T8923] device bridge_slave_1 entered promiscuous mode [ 241.597507][ T8923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.622368][ T8923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.690009][ T8923] team0: Port device team_slave_0 added [ 241.697838][ T8923] team0: Port device team_slave_1 added [ 241.802193][ T8923] device hsr_slave_0 entered promiscuous mode 08:34:43 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) [ 241.909866][ T8923] device hsr_slave_1 entered promiscuous mode [ 242.061943][ T8925] chnl_net:caif_netlink_parms(): no params data found [ 242.064460][ T8928] IPVS: ftp: loaded support on port[0] = 21 [ 242.086667][ T8931] IPVS: ftp: loaded support on port[0] = 21 08:34:43 executing program 4: add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) request_key(0x0, &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000440)='&-:[!vmnet1\x00', 0xfffffffffffffff9) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000340)='/selinux/poli\xec\x13\rA\x9e\xd7j\x8e\xcbo\xccb\xf0@^\x86t$\x87\x10]\xf3\x9d\x81\xda\x03R\x9b{\xf4\t\xaa\x83\xfa/\xfb{\xc5{\x01~\xe0,hhw\xdd\xd0\x83\xc7\x13\xb9\xf3G\x00'/80) r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r4 = socket(0x100000000011, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000040), &(0x7f00000001c0)=0x14) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000002c0)=0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e1e, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000480)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)}}], 0x2, 0x604d044) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001a40), &(0x7f0000001a80)=0xc) r6 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r6, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000840)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001ac0)) r7 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r7, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) ioctl$sock_SIOCGPGRP(r7, 0x8904, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000840)=0x0) getpgid(r8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240), 0x0) getgid() r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) getgid() r12 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r12, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000006600)="99", 0x5ac}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000001c0)="e7", 0x1}], 0x20a}}], 0x2, 0x604d044) getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f0000002000)={{{@in6=@local, @in=@local}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000002100)=0xe8) r13 = getgid() r14 = syz_open_dev$loop(&(0x7f0000000800)='/dev/loop#\x00', 0x2, 0x6c19f0a26f2b4ff0) fsetxattr$system_posix_acl(r14, 0x0, &(0x7f0000000a80)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYBLOB="b7e104430d75dff71d49ba78037bc775866ee0c2b82960abd15fd9168965ddad06aa9e5c4ab65fe12acd322facba168c8156a6056f36400a6853a16c9838d083546c7d3d5f8f2debbb34cd15770b203b09792cd12d266a635810bf0876ad8a39e365923c97437747659bebc24e568e3483a7e48e2d645c9b8b852d351aa03c3d3f0453109b157e706c97c5320eb278a601ef45142c8e7c29c2733c2e4b484735bd559bebf348f4d68b872674e58834a9df0eba1519904f9ddfaa14ea7b9549ebdd92d14ad1281e7718", @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRES32=r13, @ANYBLOB="110100000000000091c46cf6960b8c2747655a6800000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492ef020000008d7884aa1e81a0f3c50636dd23f5c2e9b02d4edb5083c1aed6b165c02f47a3f48e535a7d30fc40b8aba14152de704b20b493b090bd58a7ecdf71823451ad79120004000000000000d207ecae26efcd5c918c3fa4c6571b7fc8dfda9488eb3dc6df7d78dfcd000000000000000000004000"/195], 0x7, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=0x0) getpgid(r15) getuid() sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000006600)="99", 0x5ac}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000001c0)="e7", 0x1}], 0x20a}}], 0x2, 0x604d044) r16 = getgid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=ANY=[@ANYRESOCT, @ANYBLOB="b7e104430d75dff71d49ba78037bc775866ee0c2b82960abd15fd9168965ddad06aa9e5c4ab65fe12acd322facba168c8156a6056f36400a6853a16c9838d083546c7d3d5f8f2debbb34cd15770b203b09792cd12d266a635810bf0876ad8a39e365923c97437747659bebc24e568e3483a7e48e2d645c9b8b852d351aa03c3d3f0453109b157e706c97c5320eb278a601ef45142c8e7c29c2733c2e4b484735bd559bebf348f4d68b872674e58834a9df0eba1519904f9ddfaa14ea7b9549ebdd92d14ad128", @ANYRES32=0x0, @ANYBLOB="d916331128563861fb48b184ba2de07bf3ee0c7a9edf083eca220180533b62bc647c96baacd947b10aa479b233ab8c69f7e13a601a91312914f6815ee55cdfbfc0039f725466d10a18bf6c6074a6216e12168c38f1c69728795476fe66891ea677fdc9380ddb37a0d5f430ebaab5e455a9c2a0eb90d15620828d56bc05a8a0ad256ec6c11203fbbe1728c91de1d77bf4df211718c1206f9e4d37bf8c6fc46bd8991a34aeb637512222dbb33742505d1dd9e1d356f8ccca23816541bbf52f55b686dda5a43cdbed86085da981a758d8e6d00454574961574a98a85303f329283cdbda6dd89caa79df10f0b347db634dd37d2b85da7dcc38ec0d2ccd7946ff9d378c6bcbd936fc9adfe7dd9a78e5a9b4d5eb7cd730e704e45418fc593876a05ab3d5dd13e9b427a3cb213d1bb94be617c4d0a9099e2dc6ed3e8bbc5095716e117410bf7707020782086377b1658d84a840902d8cd56c2c4b1df3191b84e93dae1c76652edf4398c1abf39074c06966c4275bc4f129ea2b7c92ca729af7c5e3eb59db42149fd667250c3da494b5bdd60737da568286234b339d821b39bb7d7ce0e933213e0e3d63c96dc0c3c23480ec2b74d47e3bf9aba4bc511a789128357c3fae9220b74fd2e0cce0dfa3f49e3db74a111aaaff384117f4421b6e28788ea96e945f", @ANYRES32=r16, @ANYBLOB="110100000000000091c46cf6960b8c2747655a6800000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492ef020000008d7884aa1e81a0f3c50636dd23f5c2e9b02d4edb5083c1aed6b165c02f47a3f48e535a7d30fc40b8aba14152de704b20b493b090bd58a7ecdf71823451ad79120004000000000000d207ecae26efcd5c918c3fa4c6571b7fc8dfda9488eb3dc6df7d78dfcd000000000000000000004000"/195], 0x6, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r18, &(0x7f0000000340), 0x41395527) vmsplice(r17, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r19 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r19, &(0x7f0000000000)=ANY=[], 0x323) r20 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r19, r20, 0x0, 0x8fff) [ 242.440498][ T8923] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.448127][ T8923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.456495][ T8923] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.463765][ T8923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.525146][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.533966][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.561883][ T8925] device bridge_slave_0 entered promiscuous mode [ 242.611180][ T2937] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.650562][ T2937] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.730898][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.738046][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.780049][ T8925] device bridge_slave_1 entered promiscuous mode [ 242.952007][ T8957] IPVS: ftp: loaded support on port[0] = 21 [ 243.092510][ T8931] chnl_net:caif_netlink_parms(): no params data found [ 243.109589][ T8925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.209826][ T8925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.273883][ T8928] chnl_net:caif_netlink_parms(): no params data found 08:34:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="d00800002400ffffff7f00000000ffffa6fffff7", @ANYRES32=r2, @ANYBLOB="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"], 0x8d0}}, 0x0) [ 243.469389][ T8925] team0: Port device team_slave_0 added [ 243.514106][ T8923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.531501][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.539371][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.547530][ T8931] device bridge_slave_0 entered promiscuous mode [ 243.576658][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.586174][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.594739][ T8928] device bridge_slave_0 entered promiscuous mode [ 243.603751][ T8925] team0: Port device team_slave_1 added [ 243.618628][ T8931] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.625752][ T8931] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.639653][ T8931] device bridge_slave_1 entered promiscuous mode [ 243.646850][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.654224][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.666196][ T8928] device bridge_slave_1 entered promiscuous mode [ 243.679848][ T8923] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.717909][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.727400][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 243.757872][ T8931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.770183][ T8931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.842240][ T8925] device hsr_slave_0 entered promiscuous mode [ 243.889468][ T8925] device hsr_slave_1 entered promiscuous mode [ 243.938732][ T8925] debugfs: Directory 'hsr0' with parent '/' already present! [ 243.963169][ T8931] team0: Port device team_slave_0 added [ 243.975915][ T8931] team0: Port device team_slave_1 added [ 243.977763][ T8967] IPVS: ftp: loaded support on port[0] = 21 [ 244.000037][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.054387][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.066908][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.089388][ T2833] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.096597][ T2833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.104975][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.114116][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.123695][ T2833] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.130908][ T2833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.139295][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.157908][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.243467][ T8931] device hsr_slave_0 entered promiscuous mode [ 244.303626][ T8931] device hsr_slave_1 entered promiscuous mode [ 244.352986][ T8931] debugfs: Directory 'hsr0' with parent '/' already present! [ 244.376399][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.460401][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.483088][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.544504][ T8928] team0: Port device team_slave_0 added [ 244.568429][ T8928] team0: Port device team_slave_1 added [ 244.625527][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 244.681613][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.704282][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.813959][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.853857][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.919312][ T8957] chnl_net:caif_netlink_parms(): no params data found [ 245.082673][ T8928] device hsr_slave_0 entered promiscuous mode [ 245.129147][ T8928] device hsr_slave_1 entered promiscuous mode [ 245.179511][ T8928] debugfs: Directory 'hsr0' with parent '/' already present! [ 245.187224][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 245.219632][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.272869][ T8923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.889298][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.896865][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.965531][ T8923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.021011][ T8957] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.038636][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.108616][ T8957] device bridge_slave_0 entered promiscuous mode [ 246.231357][ T8925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.302013][ T8967] chnl_net:caif_netlink_parms(): no params data found [ 246.322171][ T8957] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.373626][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.414798][ T8957] device bridge_slave_1 entered promiscuous mode [ 246.521726][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.549961][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.582502][ T8925] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.702759][ T8931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.755688][ T8957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.808412][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.839667][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.848198][ T2833] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.855381][ T2833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.958172][ T8931] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.999182][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.006313][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.056161][ T8967] device bridge_slave_0 entered promiscuous mode [ 247.103719][ T8957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.179956][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.198146][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.249735][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.258259][ T8954] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.265626][ T8954] bridge0: port 2(bridge_slave_1) entered forwarding state 08:34:48 executing program 0: perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x25208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000017c0)=""/165) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000017c0)=""/165) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) fstat(0xffffffffffffffff, &(0x7f0000000740)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x400000000081, 0x10000000}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x4000000000000be, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r11, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) dup3(r10, r7, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) set_thread_area(&(0x7f0000000400)={0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}) [ 247.358096][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.380045][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.390037][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.427359][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.438961][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.447570][ T8967] device bridge_slave_1 entered promiscuous mode [ 247.496127][ T8957] team0: Port device team_slave_0 added [ 247.521082][ T9071] devpts: called with bogus options [ 247.530838][ T8957] team0: Port device team_slave_1 added [ 247.536971][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.563383][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.576658][ T2833] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.583857][ T2833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.592653][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.606801][ T8928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.634272][ T8967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.654604][ T8967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.678352][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.691912][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.715045][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.732285][ C0] hrtimer: interrupt took 27914 ns [ 247.774643][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.792588][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.802912][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.813636][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.820789][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.872209][ T8957] device hsr_slave_0 entered promiscuous mode [ 247.930152][ T8957] device hsr_slave_1 entered promiscuous mode [ 247.978580][ T8957] debugfs: Directory 'hsr0' with parent '/' already present! [ 247.994381][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.003143][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.021880][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.037199][ T8967] team0: Port device team_slave_0 added [ 248.068010][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.076853][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.085817][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.094313][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.102770][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.111543][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.120229][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.129851][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.138302][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.147496][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.156225][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.164841][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.173281][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.181889][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.194380][ T8967] team0: Port device team_slave_1 added [ 248.212535][ T8931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.238809][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.247184][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 248.266180][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.288861][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.296052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.303874][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.312896][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.336304][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 248.385035][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 248.409358][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 248.418177][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.427697][ T9077] devpts: called with bogus options [ 248.467331][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.474636][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.538956][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 248.548038][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:34:49 executing program 0: perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x25208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r1 = gettid() tkill(r1, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000017c0)=""/165) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000017c0)=""/165) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r5, r4) fstat(0xffffffffffffffff, &(0x7f0000000740)) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x400000000081, 0x10000000}, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x4000000000000be, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r10 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r11, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) dup3(r10, r7, 0x80000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) set_thread_area(&(0x7f0000000400)={0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1}) [ 248.688563][ T8931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.781973][ T8967] device hsr_slave_0 entered promiscuous mode [ 248.855764][ T9110] devpts: called with bogus options [ 248.880097][ T8967] device hsr_slave_1 entered promiscuous mode [ 248.930143][ T8967] debugfs: Directory 'hsr0' with parent '/' already present! [ 248.956247][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 248.975808][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.009275][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.039010][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.072248][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.109103][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.161902][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.196545][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.230828][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.265772][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.293747][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.373821][ T8928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.415911][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.482796][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.502026][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.616640][ T8925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.733875][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.756889][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.840638][ T8928] 8021q: adding VLAN 0 to HW filter on device batadv0 08:34:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x60a000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000003c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x6ec, @remote, 0x9}}}, 0x84) close(r0) [ 249.991823][ T8957] 8021q: adding VLAN 0 to HW filter on device bond0 08:34:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000001940)={0x0, 0x0}) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 250.234327][ T8957] 8021q: adding VLAN 0 to HW filter on device team0 08:34:51 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$mice(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, 0x0, 0x0) open(0x0, 0x0, 0x0) r2 = syz_open_dev$mice(0x0, 0x0, 0x60a000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000003c0)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x6ec, @remote, 0x9}}}, 0x84) close(r0) [ 250.310031][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.317886][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.399026][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 250.409567][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 250.478963][ T8954] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.486074][ T8954] bridge0: port 1(bridge_slave_0) entered forwarding state 08:34:51 executing program 0: open(&(0x7f0000000100)='./file0\x00', 0x204c2, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', 0x0, 0x0, 0x0) [ 250.589117][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.609790][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.658892][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.709027][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.716138][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.772509][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.802619][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 08:34:52 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) [ 250.849879][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.872524][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.923028][ T8967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.975088][ T8957] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 251.117490][ T8957] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network 08:34:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x6}}], 0x834e7301) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) sendmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x0, 0x1, 'w'}], 0x18}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x68, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x7, @media='eth\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x10181) sendmsg$nl_route(r3, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f00000000c0)={0x0, 0x81, 0xe3e}) recvmmsg(0xffffffffffffffff, &(0x7f0000008ec0), 0x1, 0x0, 0x0) [ 251.181725][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.207650][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 08:34:52 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000380)=@hci, 0x80) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "870afee0713876f1"}}, 0x48}}, 0x0) [ 251.262228][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 251.305205][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 251.351340][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 251.396807][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 251.437380][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 08:34:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r12 = socket$netlink(0x10, 0x3, 0x0) writev(r12, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r13 = socket$netlink(0x10, 0x3, 0x0) writev(r13, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r14 = socket$netlink(0x10, 0x3, 0x0) writev(r14, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r15 = socket$netlink(0x10, 0x3, 0x0) writev(r15, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r16 = socket$netlink(0x10, 0x3, 0x0) writev(r16, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r17 = socket$netlink(0x10, 0x3, 0x0) writev(r17, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r18 = socket$netlink(0x10, 0x3, 0x0) writev(r18, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r19 = socket$netlink(0x10, 0x3, 0x0) writev(r19, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r20 = socket$netlink(0x10, 0x3, 0x0) writev(r20, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r21 = socket$netlink(0x10, 0x3, 0x0) writev(r21, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r22 = socket$netlink(0x10, 0x3, 0x0) writev(r22, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r23 = socket$netlink(0x10, 0x3, 0x0) writev(r23, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r24 = socket$netlink(0x10, 0x3, 0x0) writev(r24, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r25 = socket$netlink(0x10, 0x3, 0x0) writev(r25, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r26 = socket$netlink(0x10, 0x3, 0x0) writev(r26, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r27 = socket$netlink(0x10, 0x3, 0x0) writev(r27, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r28 = socket$netlink(0x10, 0x3, 0x0) writev(r28, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r29 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r29, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r30 = socket$netlink(0x10, 0x3, 0x0) writev(r30, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r31 = socket$netlink(0x10, 0x3, 0x0) writev(r31, &(0x7f00000000c0)=[{&(0x7f0000000240)='X', 0x1}], 0x1) r32 = socket$netlink(0x10, 0x3, 0x4) writev(r32, &(0x7f00000000c0)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) read(r32, &(0x7f0000000340)=""/114, 0x72) [ 251.555082][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.574499][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.613110][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.670590][ T8967] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.685903][ T8957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.710650][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.720223][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.769791][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.792618][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.806339][ T8954] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.813524][ T8954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.830340][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.849180][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.857713][ T8954] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.864966][ T8954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.875813][ T8954] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 251.910887][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 251.930476][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 251.957025][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 251.967721][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 251.990823][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 251.999418][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.008264][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.017115][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.025641][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.034452][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.043112][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.053126][ T8967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.096844][ T8967] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.106891][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.120891][ T2833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 08:34:53 executing program 4: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f0000000000)="12cb96df", 0x4) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x78) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 252.189566][ T9233] devpts: called with bogus options [ 252.302557][ T9243] netlink: 2208 bytes leftover after parsing attributes in process `syz-executor.5'. [ 252.360110][ T9245] netlink: 2208 bytes leftover after parsing attributes in process `syz-executor.5'. 08:34:53 executing program 5: socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'nlmon0\x00', 0x1}, 0xfffffe20) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x80000000008936, &(0x7f0000000000)) 08:34:53 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpgrp(0x0) setpriority(0x2, r2, 0x0) 08:34:53 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100003, 0x500001c) 08:34:53 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x20000000014) 08:34:53 executing program 3: r0 = open(0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x2}) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0x5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 08:34:53 executing program 1: add_key$keyring(&(0x7f0000000240)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$unlink(0x9, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f0000000440)='&-:[!vmnet1\x00', 0xfffffffffffffff9) creat(&(0x7f0000000300)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f0000000340)='/selinux/poli\xec\x13\rA\x9e\xd7j\x8e\xcbo\xccb\xf0@^\x86t$\x87\x10]\xf3\x9d\x81\xda\x03R\x9b{\xf4\t\xaa\x83\xfa/\xfb{\xc5{\x01~\xe0,hhw\xdd\xd0\x83\xc7\x13\xb9\xf3G\x00'/80) r0 = gettid() tkill(r0, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0) r1 = socket(0x100000000011, 0x2, 0x0) bind(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000040), &(0x7f00000001c0)=0x14) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet(r2, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000006600)="99", 0x5ac}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000001c0)="e7", 0x1}], 0x20a}}], 0x2, 0x604d044) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), &(0x7f0000000400)=0xc) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000480)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000) sendmmsg$inet(r3, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000002200)}}], 0x1, 0x604d044) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001a40), &(0x7f0000001a80)=0xc) r4 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r4, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, 0x0) getpgid(0x0) r5 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r5, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) ioctl$sock_SIOCGPGRP(r5, 0x8904, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000840)) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) getgid() r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) getgid() sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e1e, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002000)={{{@in6=@local, @in=@local}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000002100)=0xe8) r8 = syz_open_dev$loop(0x0, 0x2, 0x6c19f0a26f2b4ff0) fsetxattr$system_posix_acl(r8, 0x0, &(0x7f0000000a80)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYBLOB="b7e104430d75dff71d49ba78037bc775866ee0c2b82960abd15fd9168965ddad06aa9e5c4ab65fe12acd322facba168c8156a6056f36400a6853a16c9838d083546c7d3d5f8f2debbb34cd15770b203b09792cd12d266a635810bf0876ad8a39e365923c97437747659bebc24e568e3483a7e48e2d645c9b8b852d351aa03c3d3f0453109b157e706c97c5320eb278a601ef45142c8e7c29c2733c2e4b484735bd559bebf348f4d68b872674e58834a9df0eba1519904f9ddfaa14ea7b9549ebdd92d14ad1281e7718", @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYBLOB="110100000000000091c46cf6960b8c2747655a6800000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492ef020000008d7884aa1e81a0f3c50636dd23f5"], 0x6, 0x1) r9 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r9, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) ioctl$sock_SIOCGPGRP(r9, 0x8904, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000840)=0x0) getpgid(r10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e1e, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000006600)="99", 0x5ac}], 0x1}}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000001c0)="e7", 0x1}], 0x20a}}], 0x2, 0x604d044) r11 = getgid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYBLOB="b7e104430d75dff71d49ba78037bc775866ee0c2b82960abd15fd9168965ddad06aa9e5c4ab65fe12acd322facba168c8156a6056f36400a6853a16c9838d083546c7d3d5f8f2debbb34cd15770b203b09792cd12d266a635810bf0876ad8a39e365923c97437747659bebc24e568e3483a7e48e2d645c9b8b852d351aa03c3d3f0453109b157e706c97c5320eb278a601ef45142c8e7c29c2733c2e4b484735bd559bebf348f4d68b872674e58834a9df0eba1519904f9ddfaa14ea7b9549ebdd92d14ad1281e7718", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="110100000000000091c46cf6960b8c2747655a6800000000000000007bfdc10e344a4c86914bece2dced4ebc5c83001d02d4f340034afaecef242f6ac292625d956492ef020000008d7884aa1e81a0f3c50636dd23f5c2e9b02d4edb5083c1aed6b165c02f47a3f48e535a7d30fc40b8aba14152de704b20b493b090bd58a7ecdf71823451ad79120004000000000000d207ecae26efcd5c918c3fa4c6571b7fc8dfda9488eb3dc6df7d78dfcd000000000000000000004000"/195], 0x7, 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r13, 0x407, 0x0) write(r13, &(0x7f0000000340), 0x41395527) vmsplice(r12, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r14 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r14, &(0x7f0000000000)=ANY=[], 0x323) r15 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r14, r15, 0x0, 0x8fff) [ 252.468337][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 252.468353][ T26] audit: type=1804 audit(1573979693.700:31): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir274859506/syzkaller.99UvoD/2/memory.events" dev="sda1" ino=16530 res=1 08:34:53 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(r1, &(0x7f0000000100), 0x1ede5) getpeername(r1, 0x0, &(0x7f0000000000)) [ 252.571570][ T9263] devpts: called with bogus options [ 252.580475][ T26] audit: type=1804 audit(1573979693.790:32): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir773154408/syzkaller.mnXMgh/3/file0" dev="sda1" ino=16544 res=1 08:34:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x20300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x40000000000, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0xff, 0x6e, 0xfd}}, 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:53 executing program 2: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1}, @icmp=@address_reply={0x3}}}}}, 0x0) [ 252.767227][ T26] audit: type=1804 audit(1573979694.000:33): pid=9274 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir274859506/syzkaller.99UvoD/3/bus" dev="sda1" ino=16537 res=1 08:34:54 executing program 3: r0 = open(0x0, 0x0, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x0) gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000280)={0x2}) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r2, 0x400, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0x5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 252.811911][ T9279] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 08:34:54 executing program 2: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000002c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 08:34:54 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0xff, 0x6e, 0xfd}}, 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:54 executing program 0: 08:34:54 executing program 5: 08:34:54 executing program 0: 08:34:54 executing program 3: 08:34:54 executing program 2: [ 253.453154][ T9274] devpts: called with bogus options 08:34:54 executing program 1: 08:34:54 executing program 5: 08:34:54 executing program 0: 08:34:54 executing program 3: 08:34:54 executing program 2: 08:34:55 executing program 5: 08:34:55 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0xff, 0x6e, 0xfd}}, 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:55 executing program 1: 08:34:55 executing program 2: 08:34:55 executing program 3: 08:34:55 executing program 0: 08:34:55 executing program 5: 08:34:55 executing program 5: 08:34:55 executing program 1: 08:34:55 executing program 0: dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r0, &(0x7f0000004b40)=[{{&(0x7f0000000b00)=@rc, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f0000003380)=""/83, 0x53}, {0x0}, {&(0x7f0000004580)=""/203, 0xcb}, {0x0}], 0x4, &(0x7f0000004a40)=""/243, 0xf3}}], 0x2, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) 08:34:55 executing program 3: epoll_create1(0x0) unshare(0x400) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0xd, &(0x7f0000000000)={0x7ff}, 0x0, 0x0, 0x0, 0x0) 08:34:55 executing program 2: 08:34:55 executing program 1: 08:34:55 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0xff, 0x6e, 0xfd}}, 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:55 executing program 2: 08:34:55 executing program 5: 08:34:55 executing program 3: 08:34:55 executing program 1: 08:34:55 executing program 5: [ 254.548856][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 254.555017][ C1] protocol 88fb is buggy, dev hsr_slave_1 08:34:55 executing program 2: 08:34:55 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) dup(0xffffffffffffffff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0xff, 0x6e, 0xfd}}, 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 254.869297][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 254.875199][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 254.948547][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 254.954368][ C0] protocol 88fb is buggy, dev hsr_slave_1 08:34:56 executing program 0: 08:34:56 executing program 3: 08:34:56 executing program 5: 08:34:56 executing program 1: 08:34:56 executing program 2: 08:34:56 executing program 4: 08:34:56 executing program 5: 08:34:56 executing program 4: 08:34:56 executing program 2: 08:34:56 executing program 3: 08:34:56 executing program 1: 08:34:56 executing program 0: 08:34:56 executing program 5: 08:34:56 executing program 3: 08:34:56 executing program 1: 08:34:56 executing program 2: 08:34:56 executing program 4: 08:34:56 executing program 0: 08:34:56 executing program 5: 08:34:56 executing program 3: 08:34:57 executing program 1: 08:34:57 executing program 2: 08:34:57 executing program 4: 08:34:57 executing program 3: 08:34:57 executing program 0: 08:34:57 executing program 5: 08:34:57 executing program 1: 08:34:57 executing program 2: 08:34:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x40000000000, 0x62160554]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, {0x0, 0xff, 0x6e, 0xfd}}, 0xa) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:34:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100), 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 08:34:57 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) open(0x0, 0x0, 0x0) 08:34:57 executing program 1: r0 = socket$kcm(0x2b, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001c00810ee00f80ecdb4cb9e307f029a00d0000002f003efb0a0002000000000000000f00060005000600", 0x2e}], 0x1}, 0x0) 08:34:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x2, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) socket$alg(0x26, 0x5, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000080)}, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) socket(0x40000000002, 0x3, 0x80000000002) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000000)="fad911553dea9381", 0x8, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x282, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 08:34:57 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x2e, 0x8000000803, 0x4) write(r2, &(0x7f0000000040)="220000002000070700be000009000701020000000000000000200000050013800100", 0x27a) [ 256.329192][ T9455] bridge: RTM_NEWNEIGH with invalid ether address 08:34:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x8126000, 0x0}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0xc0347c03, &(0x7f0000000000)) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x80, 0x1a, 0x4, 0x7, "bf3d0fe67d2970ba544337161450848f192b7b42aa25815586d13508482a8baf"}) 08:34:57 executing program 4: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x80) link(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000200)='./bus/file1\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) creat(&(0x7f0000000140)='./bus/file0\x00', 0x0) creat(&(0x7f0000000080)='./bus/file1\x00', 0x0) 08:34:57 executing program 1: ioperm(0x0, 0x7ff, 0x0) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40000) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400000, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 256.536943][ T9472] binder: 9470:9472 unknown command 0 [ 256.564325][ T9472] binder: 9470:9472 ioctl c0306201 20000080 returned -22 08:34:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x80080, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x5, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xd}, 0x6}}, 0xe425966e4d85516e, 0x5, [{{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, {{0xa, 0x4e21, 0x8, @local, 0x1ff}}, {{0xa, 0x4e22, 0x6, @empty, 0xfff}}, {{0xa, 0x4e21, 0x4, @rand_addr="32499e8af523079049bae8631ebdc1c1", 0x7}}, {{0xa, 0x4e22, 0x0, @remote, 0x4}}]}, 0x310) r1 = socket$inet(0x10, 0x2, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000300)={0x8, &(0x7f00000002c0)=[0x0, 0xbc68, 0x3, 0x9, 0x1, 0x6dc3, 0x0, 0x5]}) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000001c0)=""/185) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000280)=0x4, 0x4) select(0x40, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x3, 0x0, 0x6, 0x4000000000000, 0x935d}, &(0x7f0000000080)={0x4, 0x0, 0x7b589b1e, 0x0, 0x5, 0x0, 0x0, 0x1f}, &(0x7f00000000c0)={0x3, 0x80000001, 0x4, 0x7, 0x0, 0x9, 0x1}, &(0x7f0000000100)={0x77359400}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) chroot(&(0x7f0000000140)='./file0\x00') 08:34:57 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r2, 0xc0347c03, &(0x7f0000000000)) ioctl$CAPI_CLR_FLAGS(r2, 0x80044325, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x65}, [@ldst={0x7, 0x0, 0x0, 0xa0c91}]}, &(0x7f0000003ff6)='OPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195}, 0x48) [ 256.628604][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 256.634457][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 256.664124][ T9472] binder: 9470:9472 unknown command 0 [ 256.735343][ T9472] binder: 9470:9472 ioctl c0306201 20000080 returned -22 08:34:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x82b3) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) creat(0x0, 0x80) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) [ 256.925267][ T9471] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 256.948563][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 256.954408][ C1] protocol 88fb is buggy, dev hsr_slave_1 08:34:58 executing program 5: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(0xffffffffffffffff, r2) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000240)='fdinfo/4\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(0xffffffffffffffff, 0x0, 0x1) ioctl$RTC_WIE_OFF(r5, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d8d38b7b592716cf410e6f7161e8f82cd7fc3cd563722593b1ffa29ee2760bbf5b6d24356fde852664d7c2a7690440690b79921285457cb7d259a5d43759a9d56165279665f4c3486c7f655d81dd91b518b21fc0b3b1a1f98b8142b9527c5f6696b734f34b8c526e9cac7ff1ae926f75eed86e5fb18f120035a7cf6bb84e69601be0f99ffcb769c0d151e41de356b06c0d95528f941687a899459b41c9d17e5c7779f40dadcee6e84399d7475f735cc08a594d251554e29badd27dac9f848b4e82392d094d5f836a5fe38972c3876f593747ec82a816a626db206dba2b0f2cdecd26d", @ANYRESDEC=0x0, @ANYBLOB="f4eed3f63ec990449b112954861243e5744509a9f70280c3cc95568b917631e3fbf5e48a52354d66a8a6c70770046a239b05b2e842cababb6d2ba5319d493b799c1ee36bd303f47952ae50321e9aee054a8a42e22ec5fcd963b6fbca933076feebebcc1f4f50adaf80a2a6d06e6028b824f337d5b74785153b25594619a5976f32f2b006de84cca5536ebe22e954ec16fcc081af9e71f246d7842616a66cd54976"]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00d863dc7f2702c5ba8e203c3b0613963ea642d7f392a770e87d2adb7a27c9bf37c14632bab37ad97821eebee73f014d44687c0c7cbc869173a13d211e3e53eff4f6b474b38b4679369fcbb2a91eb52ff838029d6c374a7b7370f2769a35f8270c2add08e0a25bc403a26868a8e2efd206a0f2b43584a22274b2d7732241c1fbde428d029bd2e560526bbc5e0ae400792795a9e82d3c8f82c46901add2f8dad5b69935f6401fe39e43c05cdf"]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) 08:34:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x82b3) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) creat(0x0, 0x80) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) 08:34:58 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x80080, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x5, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xd}, 0x6}}, 0xe425966e4d85516e, 0x5, [{{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, {{0xa, 0x4e21, 0x8, @local, 0x1ff}}, {{0xa, 0x4e22, 0x6, @empty, 0xfff}}, {{0xa, 0x4e21, 0x4, @rand_addr="32499e8af523079049bae8631ebdc1c1", 0x7}}, {{0xa, 0x4e22, 0x0, @remote, 0x4}}]}, 0x310) r1 = socket$inet(0x10, 0x2, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000300)={0x8, &(0x7f00000002c0)=[0x0, 0xbc68, 0x3, 0x9, 0x1, 0x6dc3, 0x0, 0x5]}) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000001c0)=""/185) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000280)=0x4, 0x4) select(0x40, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x3, 0x0, 0x6, 0x4000000000000, 0x935d}, &(0x7f0000000080)={0x4, 0x0, 0x7b589b1e, 0x0, 0x5, 0x0, 0x0, 0x1f}, &(0x7f00000000c0)={0x3, 0x80000001, 0x4, 0x7, 0x0, 0x9, 0x1}, &(0x7f0000000100)={0x77359400}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) chroot(&(0x7f0000000140)='./file0\x00') 08:34:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) connect$inet(r0, &(0x7f0000000100), 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0) 08:34:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x3}, 0x2a1) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r4, 0xc0347c03, &(0x7f0000000000)) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xfffc, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f00000001c0), 0x1) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) timerfd_gettime(r7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x11e1eb) socket$inet_tcp(0x2, 0x1, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffffffffffe8c) [ 257.742790][ T9498] fuse: Bad value for 'fd' 08:34:59 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x82b3) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) creat(0x0, 0x80) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xbb8) 08:34:59 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) r4 = fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000040)=0x400, 0x4) 08:34:59 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x80080, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x5, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xd}, 0x6}}, 0xe425966e4d85516e, 0x5, [{{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, {{0xa, 0x4e21, 0x8, @local, 0x1ff}}, {{0xa, 0x4e22, 0x6, @empty, 0xfff}}, {{0xa, 0x4e21, 0x4, @rand_addr="32499e8af523079049bae8631ebdc1c1", 0x7}}, {{0xa, 0x4e22, 0x0, @remote, 0x4}}]}, 0x310) r1 = socket$inet(0x10, 0x2, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000300)={0x8, &(0x7f00000002c0)=[0x0, 0xbc68, 0x3, 0x9, 0x1, 0x6dc3, 0x0, 0x5]}) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000001c0)=""/185) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000280)=0x4, 0x4) select(0x40, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x3, 0x0, 0x6, 0x4000000000000, 0x935d}, &(0x7f0000000080)={0x4, 0x0, 0x7b589b1e, 0x0, 0x5, 0x0, 0x0, 0x1f}, &(0x7f00000000c0)={0x3, 0x80000001, 0x4, 0x7, 0x0, 0x9, 0x1}, &(0x7f0000000100)={0x77359400}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) chroot(&(0x7f0000000140)='./file0\x00') 08:34:59 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) r4 = fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000040)=0x400, 0x4) [ 258.413097][ T9523] fuse: Bad value for 'fd' 08:34:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x3}, 0x2a1) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r4, 0xc0347c03, &(0x7f0000000000)) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xfffc, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f00000001c0), 0x1) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) timerfd_gettime(r7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x11e1eb) socket$inet_tcp(0x2, 0x1, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffffffffffe8c) 08:34:59 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) r4 = fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000040)=0x400, 0x4) 08:35:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) socket$inet_icmp_raw(0x2, 0x3, 0x1) getpgid(0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x3}, 0x2a1) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r4, 0xc0347c03, &(0x7f0000000000)) connect$inet6(r4, &(0x7f0000000140)={0xa, 0xfffc, 0x0, @loopback, 0x3}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev}, 0x20) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f00000001c0), 0x1) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={[], [], @initdev}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x0, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) timerfd_gettime(r7, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x11e1eb) socket$inet_tcp(0x2, 0x1, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet6(r8, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffffffffffe8c) 08:35:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x80080, 0x0) sysinfo(&(0x7f0000000000)=""/22) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x5, {{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, [], 0xd}, 0x6}}, 0xe425966e4d85516e, 0x5, [{{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, {{0xa, 0x4e21, 0x8, @local, 0x1ff}}, {{0xa, 0x4e22, 0x6, @empty, 0xfff}}, {{0xa, 0x4e21, 0x4, @rand_addr="32499e8af523079049bae8631ebdc1c1", 0x7}}, {{0xa, 0x4e22, 0x0, @remote, 0x4}}]}, 0x310) r1 = socket$inet(0x10, 0x2, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000300)={0x8, &(0x7f00000002c0)=[0x0, 0xbc68, 0x3, 0x9, 0x1, 0x6dc3, 0x0, 0x5]}) openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$EVIOCGABS20(r2, 0x80184560, &(0x7f00000001c0)=""/185) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000280)=0x4, 0x4) select(0x40, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x3, 0x0, 0x6, 0x4000000000000, 0x935d}, &(0x7f0000000080)={0x4, 0x0, 0x7b589b1e, 0x0, 0x5, 0x0, 0x0, 0x1f}, &(0x7f00000000c0)={0x3, 0x80000001, 0x4, 0x7, 0x0, 0x9, 0x1}, &(0x7f0000000100)={0x77359400}) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) chroot(&(0x7f0000000140)='./file0\x00') 08:35:01 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) r4 = fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000040)=0x400, 0x4) 08:35:01 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000000)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x2b42d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000140)}, 0x0, 0x400000000000df, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xffffffffffffffff, 0x4acc00) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100)=0x401, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$nl_netfilter(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x9, 0xb, 0x200, 0x70bd2d, 0x25dfdbff, {0x12, 0x0, 0xa}, [@typed={0x8, 0x75, @u32=0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4008000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f0000000180)={0x101, 0x80000001, 0x6}) socket(0x100000000011, 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, 0x0) 08:35:01 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0xc0347c03, &(0x7f0000000000)) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000100)={0x7, 0x54, "48c29ae5ff67da45d17f57a6a620f1a71d484f1ad19630d55e741c1c25841a0a1bbd9e51aa7634c0f75b33c6ede19d5ccc208507863efbe1dee63309321b70359dc86f09608c8996f6647d8d5c9c37fe4de965d5"}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x58100802}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xec, r2, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @loopback}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1a3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8717}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0xe0c5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xec}, 0x1, 0x0, 0x0, 0x858}, 0x60008000) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000000540)={0x2e, 0x6, 0x0, {0x6, 0x1, 0x5, 0x0, 'IPVS\x00'}}, 0x2e) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2, 0x0, 0x0, 0x8}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x4}, 0x10}, 0x70) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r4, 0xc0347c03, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000500)={'team_slave_1\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xc6a0628b34a8a39e}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 08:35:01 executing program 1: r0 = socket$inet(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="24000000120007031dfffd946fa2830004000a0009000000741d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) memfd_create(&(0x7f0000000000)='.vmnet0vboxnet0([\x00', 0x4) 08:35:01 executing program 5: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(0xffffffffffffffff, r2) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000240)='fdinfo/4\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(0xffffffffffffffff, 0x0, 0x1) ioctl$RTC_WIE_OFF(r5, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d8d38b7b592716cf410e6f7161e8f82cd7fc3cd563722593b1ffa29ee2760bbf5b6d24356fde852664d7c2a7690440690b79921285457cb7d259a5d43759a9d56165279665f4c3486c7f655d81dd91b518b21fc0b3b1a1f98b8142b9527c5f6696b734f34b8c526e9cac7ff1ae926f75eed86e5fb18f120035a7cf6bb84e69601be0f99ffcb769c0d151e41de356b06c0d95528f941687a899459b41c9d17e5c7779f40dadcee6e84399d7475f735cc08a594d251554e29badd27dac9f848b4e82392d094d5f836a5fe38972c3876f593747ec82a816a626db206dba2b0f2cdecd26d", @ANYRESDEC=0x0, @ANYBLOB="f4eed3f63ec990449b112954861243e5744509a9f70280c3cc95568b917631e3fbf5e48a52354d66a8a6c70770046a239b05b2e842cababb6d2ba5319d493b799c1ee36bd303f47952ae50321e9aee054a8a42e22ec5fcd963b6fbca933076feebebcc1f4f50adaf80a2a6d06e6028b824f337d5b74785153b25594619a5976f32f2b006de84cca5536ebe22e954ec16fcc081af9e71f246d7842616a66cd54976"]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00d863dc7f2702c5ba8e203c3b0613963ea642d7f392a770e87d2adb7a27c9bf37c14632bab37ad97821eebee73f014d44687c0c7cbc869173a13d211e3e53eff4f6b474b38b4679369fcbb2a91eb52ff838029d6c374a7b7370f2769a35f8270c2add08e0a25bc403a26868a8e2efd206a0f2b43584a22274b2d7732241c1fbde428d029bd2e560526bbc5e0ae400792795a9e82d3c8f82c46901add2f8dad5b69935f6401fe39e43c05cdf"]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) [ 260.244621][ T9553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:35:01 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) r4 = fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) 08:35:01 executing program 4: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(0xffffffffffffffff, r2) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000240)='fdinfo/4\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(0xffffffffffffffff, 0x0, 0x1) ioctl$RTC_WIE_OFF(r5, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d8d38b7b592716cf410e6f7161e8f82cd7fc3cd563722593b1ffa29ee2760bbf5b6d24356fde852664d7c2a7690440690b79921285457cb7d259a5d43759a9d56165279665f4c3486c7f655d81dd91b518b21fc0b3b1a1f98b8142b9527c5f6696b734f34b8c526e9cac7ff1ae926f75eed86e5fb18f120035a7cf6bb84e69601be0f99ffcb769c0d151e41de356b06c0d95528f941687a899459b41c9d17e5c7779f40dadcee6e84399d7475f735cc08a594d251554e29badd27dac9f848b4e82392d094d5f836a5fe38972c3876f593747ec82a816a626db206dba2b0f2cdecd26d", @ANYRESDEC=0x0, @ANYBLOB="f4eed3f63ec990449b112954861243e5744509a9f70280c3cc95568b917631e3fbf5e48a52354d66a8a6c70770046a239b05b2e842cababb6d2ba5319d493b799c1ee36bd303f47952ae50321e9aee054a8a42e22ec5fcd963b6fbca933076feebebcc1f4f50adaf80a2a6d06e6028b824f337d5b74785153b25594619a5976f32f2b006de84cca5536ebe22e954ec16fcc081af9e71f246d7842616a66cd54976"]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00d863dc7f2702c5ba8e203c3b0613963ea642d7f392a770e87d2adb7a27c9bf37c14632bab37ad97821eebee73f014d44687c0c7cbc869173a13d211e3e53eff4f6b474b38b4679369fcbb2a91eb52ff838029d6c374a7b7370f2769a35f8270c2add08e0a25bc403a26868a8e2efd206a0f2b43584a22274b2d7732241c1fbde428d029bd2e560526bbc5e0ae400792795a9e82d3c8f82c46901add2f8dad5b69935f6401fe39e43c05cdf"]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) [ 260.340812][ T9564] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 08:35:01 executing program 1: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x400, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000480)) userfaultfd(0x80000) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') dup2(0xffffffffffffffff, r2) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000240)='fdinfo/4\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xff2a}], 0x1, 0x4000) lseek(0xffffffffffffffff, 0x0, 0x1) ioctl$RTC_WIE_OFF(r5, 0x7010) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r6, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d8d38b7b592716cf410e6f7161e8f82cd7fc3cd563722593b1ffa29ee2760bbf5b6d24356fde852664d7c2a7690440690b79921285457cb7d259a5d43759a9d56165279665f4c3486c7f655d81dd91b518b21fc0b3b1a1f98b8142b9527c5f6696b734f34b8c526e9cac7ff1ae926f75eed86e5fb18f120035a7cf6bb84e69601be0f99ffcb769c0d151e41de356b06c0d95528f941687a899459b41c9d17e5c7779f40dadcee6e84399d7475f735cc08a594d251554e29badd27dac9f848b4e82392d094d5f836a5fe38972c3876f593747ec82a816a626db206dba2b0f2cdecd26d", @ANYRESDEC=0x0, @ANYBLOB="f4eed3f63ec990449b112954861243e5744509a9f70280c3cc95568b917631e3fbf5e48a52354d66a8a6c70770046a239b05b2e842cababb6d2ba5319d493b799c1ee36bd303f47952ae50321e9aee054a8a42e22ec5fcd963b6fbca933076feebebcc1f4f50adaf80a2a6d06e6028b824f337d5b74785153b25594619a5976f32f2b006de84cca5536ebe22e954ec16fcc081af9e71f246d7842616a66cd54976"]) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00d863dc7f2702c5ba8e203c3b0613963ea642d7f392a770e87d2adb7a27c9bf37c14632bab37ad97821eebee73f014d44687c0c7cbc869173a13d211e3e53eff4f6b474b38b4679369fcbb2a91eb52ff838029d6c374a7b7370f2769a35f8270c2add08e0a25bc403a26868a8e2efd206a0f2b43584a22274b2d7732241c1fbde428d029bd2e560526bbc5e0ae400792795a9e82d3c8f82c46901add2f8dad5b69935f6401fe39e43c05cdf"]) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) 08:35:01 executing program 2: add_key$keyring(&(0x7f00000008c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, r0) request_key(&(0x7f0000000800)='dns_resolver\x00', &(0x7f0000000840)={'\x00', 0x3}, &(0x7f0000000880)='./cgroup.net/syz1\x00', r0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r4 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xd8f}, 0x1c) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x101, 0x1, {0x4, 0x0, 0x80000000, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000940)='?dev/a5\xc8\xb3x\xac\xeb\v#R\xb8\x9a\xa2', 0x200000, 0x261801) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c0000001c0008002cbd70000000000015000000e4b60a7990192b4093f3f4149f23ac1195e1472afb2648a425e0de058b579c12c08410d140efe5f1aeeabe5b956b6e7a78786b9c1b14634bb902bf11c43cf43ddc812ed94e724208bcdeeeb1b37fff107aaf0e8d87af30d4ea9ab1bf836ea79bff576f118bea7f55f2c93cbc8ffc9d4d0e191b7726680f0729d27f9ec90b0000000000000000"], 0x9c}}, 0x4000000) r6 = syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x0, 0x105000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700140001008e0000c09100e905a3000800"], 0x12) fsmount(r6, 0x0, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) sendto$packet(r5, &(0x7f0000000240), 0x0, 0x4000, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0xfe, 0x6, @random="2e17d5349ce9"}, 0x14) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x40, 0x410000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2f62d92cc3680a66c1fe1e1bc8b98b9d05795f38e9bb9d3c5573e88d8aa6ee0200000049bbd103000000665c64d2aa5adf007f000000000000347a75dc3b7dded7e006f2"], 0x0) sendfile(r3, r3, 0x0, 0x40fdf) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x14) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x0) 08:35:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @ioapic={0x0, 0x0, 0x800, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x5}, {0x3, 0xfc}, {0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, [], 0x81}, {}, {0x3, 0x0, 0x6}, {0x0, 0x0, 0x0, [], 0x5}, {}, {}, {0x0, 0x3, 0x6}, {0x7}]}}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$P9_RRENAMEAT(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x7) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x0, 0x0, [0x0, 0x1, 0x1, 0x5]}) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000000)={0x9, 0x8121, 0xc0, 0x4, 0x7, 0xffffffff}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000500)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000340)=0x2) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180), 0xc, 0x0}, 0x8840) r4 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x10000, 0x80000) write$P9_RVERSION(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b51341d81d71b89ce3620004b845cfa0e177495d1c7b1bdbf3c9e71375754a5f699c55a7d21bb6491060efa44c94201a2c295b9962fefe8591a20ba20b5761966982a750b9d6debc7c005fabaa9df7587b1490c8ac7d35a4e15ea074360f0ea9509a1f725a66df4fea966fe65f56cb6a41b8c7f043a701b52f87cdca838a45d4d40ce07781ad5c0000000023ad1e092c"], 0x15) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x4000000000000, 0x0, 0x0, 0x8000000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 08:35:01 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) r4 = fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) socket$unix(0x1, 0x3, 0x0) 08:35:02 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) r4 = fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 261.090845][ T9561] fuse: Bad value for 'fd' 08:35:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000000000000000f980f200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r3, @ANYBLOB="005f14fe5b3ebcaf0008000100687462001c00030018000200030001000000000800000000000000ce204b707500"/55], 0x48}}, 0x0) semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000500)=""/4096) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="34000000250007017000"/20, @ANYRES32=r3, @ANYBLOB="0000ffff0000ffff0000000003000100677265640000000004000200"], 0x34}}, 0x0) r4 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r4, 0xc0347c03, &(0x7f0000000000)) sendmmsg$alg(r4, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000003c0)="e1fe43887ff3b9ed01a43f0050dd6a444b53650c69afacf659eacf7325def46b441bee851fba8071d3f884aa9507d74bac96d67b356b795622b3f4fb70250b38562dcd78bae59d5f5f7bba7bfef261c15b6aea138f0316d5b9aac700131e70e515f618bb1dc5863c5689c623e56801dc7a49bd3f", 0x74}, {&(0x7f0000001500)="a0247b5446f5d2e6d627a419023daa93e60a35f0e0b9f306232aa3e61f754c34992a710cde8f45b20c55d8c64fa6ad852868991192341029b2def91391ab8cbed7eee006d92ad6dc875f1452a642fbe0a416a6ae9ff531cb2492596ff44a695c3dd18be82f4d8deb720ea8fc83ffe4c302089e9b18b73cd8465eee6c2bace0fc7bfe9723e86e555c741069ec209f5a6c60b95b3473465d4c612f7f38f74099d825483c009eab5a1cf3a1867fe14074e58126f04ed3", 0xb5}, {&(0x7f00000000c0)="e803220a95eefcf967050094f6ea8718d083b522369094dbf8", 0x19}, {&(0x7f0000000440)="3a7161cacfaf946745f38f43bf9955b24b887325467b3aef06a3e6dec6d0e647708376303e959e9abd6f42b2634a584deba31daa46ce9e0445296e44ffaa3978f3b1927b8ca30edf565365720b", 0x4d}, {&(0x7f00000015c0)="b6595d055e79d4fdabb0e46e3e5088cad495ca640f592ca2b6c8b07fff16784da3dc106e57a10af62b21d5bf0b8e979658fc127b5221f5f6530113e8e99a077e6218c034154a0380c367a62bf3a7030f7f657f09cf7ad771b32a19374650decc0b31d671a06ae9c2e632fe13cd46bf59c58b4caaf8307f7d198818a6108459e842ccebba2af52b5f10d4f6d1da4b5e232c137962d48d4f47d3259c84f85cac7871", 0xa1}, {&(0x7f0000001680)="0f3058a083ed781dfa6c7fa68b5d0d88e2d4aff2ebad16af3123a20659af98d6accdf31ce738ad7d4463d8560228f2b87199e14659b550dd37b09f596d4e78e174598324b977efb3855ccf03e2f27a6957dca41a39b0a2c467b29e34e819bccbd1ba7186993bf0c4d28678199fa9ba1e61c963e78cafc6ba28e81888ddf306b0790571e8c07c4fedd589dc9b330cdeede8a05e4972dfd776e486e3de8c2ae3e8a3f63af733fd95faf21e8be838551fe45eb93022f50f9b3f5565b4e29ec5188b5ea841271761af419fdf617100", 0xcd}, {&(0x7f0000001780)="4f9a7e7a6d72f1d501ad4d99849b67d3090d8325c01569bcbdb633f9de74970f4d846520a97a3034a266338d70b9ffeb707d89d246b8e89f8c97f7c530ae507b2cfd9d844d63e9f31c92906815e0b981984cc0cf91461a76688d58154db7fbfa052b05eb5d8111d2c5806476015d44e659f719c287cd9ad10328fe7262e46760e596631913b57057b9", 0x89}], 0x7, &(0x7f00000018c0)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18, 0x40000084}], 0x1, 0x4000115) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 08:35:02 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) dup(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 261.275704][ T9597] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.299207][ T9597] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. 08:35:02 executing program 2: add_key$keyring(&(0x7f00000008c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, r0) request_key(&(0x7f0000000800)='dns_resolver\x00', &(0x7f0000000840)={'\x00', 0x3}, &(0x7f0000000880)='./cgroup.net/syz1\x00', r0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r4 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xd8f}, 0x1c) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x101, 0x1, {0x4, 0x0, 0x80000000, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000940)='?dev/a5\xc8\xb3x\xac\xeb\v#R\xb8\x9a\xa2', 0x200000, 0x261801) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c0000001c0008002cbd70000000000015000000e4b60a7990192b4093f3f4149f23ac1195e1472afb2648a425e0de058b579c12c08410d140efe5f1aeeabe5b956b6e7a78786b9c1b14634bb902bf11c43cf43ddc812ed94e724208bcdeeeb1b37fff107aaf0e8d87af30d4ea9ab1bf836ea79bff576f118bea7f55f2c93cbc8ffc9d4d0e191b7726680f0729d27f9ec90b0000000000000000"], 0x9c}}, 0x4000000) r6 = syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x0, 0x105000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700140001008e0000c09100e905a3000800"], 0x12) fsmount(r6, 0x0, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) sendto$packet(r5, &(0x7f0000000240), 0x0, 0x4000, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0xfe, 0x6, @random="2e17d5349ce9"}, 0x14) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x40, 0x410000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2f62d92cc3680a66c1fe1e1bc8b98b9d05795f38e9bb9d3c5573e88d8aa6ee0200000049bbd103000000665c64d2aa5adf007f000000000000347a75dc3b7dded7e006f2"], 0x0) sendfile(r3, r3, 0x0, 0x40fdf) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x14) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x0) [ 261.365927][ T9568] fuse: Bad value for 'fd' [ 261.407530][ T9605] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 08:35:02 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x40002) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{}]}) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x2000) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000003340)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000003380)=r5) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000040)={0x2ca29915, 0x709b, 0xe0eb, 0x8, 0x1, 0x326, 0x2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'veth1_to_bond\x00', 0x400}) r6 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) ioctl$TIOCLINUX6(r6, 0x541c, &(0x7f0000000280)={0x6, 0x7}) 08:35:02 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) dup(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 261.449750][ T9597] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.561582][ T9575] fuse: Bad value for 'fd' 08:35:02 executing program 0: r0 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x200004) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200200, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000040)=@buf={0x63, &(0x7f0000000140)="d5f9b758f6b28ac353bbedc2e1e25c62016e657c33b100ac2199c6ed0b3c9a292b118a784f6e099edb57cfdc6bb763b0ef748ddc1faebef6aba5335bc11fe2ef9a3ab26840c33ed365b07508a464949a744ba5cb1e6819657053674d2678cf0ee98766"}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x1}, 0x10) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='\b\x00'/12]}) sendfile(r1, r3, 0x0, 0x9) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) [ 261.671875][ T9614] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 08:35:03 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) dup(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:03 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xb}}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) ioctl$FICLONE(r2, 0x40049409, r3) ioctl$SG_EMULATED_HOST(r1, 0xc0347c03, &(0x7f0000000000)) recvmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000240)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/223, 0xdf}, {&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000580)=""/247, 0xf7}], 0x4, &(0x7f0000000680)=""/138, 0x8a}, 0x20) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000040)={0xc63, {{0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, [], 0x14}, 0x4}}, {{0xa, 0x4e24, 0x9, @ipv4={[], [], @remote}, 0x10001}}}, 0x108) 08:35:03 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r6 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r6, 0xc0347c03, &(0x7f0000000000)) ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f00000003c0)=""/174) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000540)={r7, @in6={{0xa, 0x0, 0x2, @empty}}}, 0xfd54) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={0x0, 0xfffff000, 0xe390, 0x1, 0x7, 0x4, 0xda48, 0x5, {r7, @in={{0x2, 0x4e24, @broadcast}}, 0x3, 0x6, 0x4, 0x0, 0x9}}, &(0x7f00000002c0)=0xb0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000300)={r8, @in6={{0xa, 0x4e23, 0x62f8, @dev={0xfe, 0x80, [], 0xe}, 0x7f}}}, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000100013070000000000000000fe800000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x158}}, 0x0) 08:35:03 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) r4 = fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:03 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a182310b41c36e6cd07ca217136641fcefb0897a12a353db75981ae51b43a03c55e2f7a63659bd2df838"], 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="5160cb74afa59d082751cf3532992184fa3c075cebd583ffcc5defc80f1b0ca76b06e95eb26b3822959631369ec06618d7fc7be4a24098a2bb36230e2e2bbb0feab291f48ed475753635a151e093151a1f162177248d89bc8311f7d40b0796222e84bfbb282e2e17c2a83af44bf5397cce", 0x71, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='big_key\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') pause() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) [ 262.103735][ T26] audit: type=1800 audit(1573979703.340:34): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16614 res=0 08:35:03 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@index_off='index=off'}]}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4c000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) r2 = geteuid() r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000280)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000380)=0xe8) mount$fuse(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='fuse\x00', 0x802000, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}], [{@euid_lt={'euid<', r2}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, r4}}]}}) 08:35:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d0000000000000000000000b9943add2d42e256bcde25a28b72a66e0ec6e7095fe70ae007720332d8910cfba4bef5d014e117ac302a2a8ea49da1"], 0x15) r3 = dup(r2) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000005c0)=0x100, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x12100, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000100)=0x57) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U+', 0x7}, 0x28, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1000000, 0x0) 08:35:03 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) r4 = fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) socket$unix(0x1, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:03 executing program 2: add_key$keyring(&(0x7f00000008c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, r0) request_key(&(0x7f0000000800)='dns_resolver\x00', &(0x7f0000000840)={'\x00', 0x3}, &(0x7f0000000880)='./cgroup.net/syz1\x00', r0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r4 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xd8f}, 0x1c) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x101, 0x1, {0x4, 0x0, 0x80000000, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000940)='?dev/a5\xc8\xb3x\xac\xeb\v#R\xb8\x9a\xa2', 0x200000, 0x261801) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c0000001c0008002cbd70000000000015000000e4b60a7990192b4093f3f4149f23ac1195e1472afb2648a425e0de058b579c12c08410d140efe5f1aeeabe5b956b6e7a78786b9c1b14634bb902bf11c43cf43ddc812ed94e724208bcdeeeb1b37fff107aaf0e8d87af30d4ea9ab1bf836ea79bff576f118bea7f55f2c93cbc8ffc9d4d0e191b7726680f0729d27f9ec90b0000000000000000"], 0x9c}}, 0x4000000) r6 = syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x0, 0x105000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700140001008e0000c09100e905a3000800"], 0x12) fsmount(r6, 0x0, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) sendto$packet(r5, &(0x7f0000000240), 0x0, 0x4000, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0xfe, 0x6, @random="2e17d5349ce9"}, 0x14) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x40, 0x410000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2f62d92cc3680a66c1fe1e1bc8b98b9d05795f38e9bb9d3c5573e88d8aa6ee0200000049bbd103000000665c64d2aa5adf007f000000000000347a75dc3b7dded7e006f2"], 0x0) sendfile(r3, r3, 0x0, 0x40fdf) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x14) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x0) 08:35:03 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x40002) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{}]}) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x2000) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000003340)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000003380)=r5) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000040)={0x2ca29915, 0x709b, 0xe0eb, 0x8, 0x1, 0x326, 0x2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'veth1_to_bond\x00', 0x400}) r6 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) ioctl$TIOCLINUX6(r6, 0x541c, &(0x7f0000000280)={0x6, 0x7}) [ 262.399733][ T9651] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 08:35:03 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) r4 = fcntl$dupfd(r2, 0x0, r1) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 262.543533][ T9651] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. 08:35:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x40002) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{}]}) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x2000) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000003340)={'team0\x00', 0x0}) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000003380)=r5) ioctl$RTC_PLL_SET(r4, 0x40207012, &(0x7f0000000040)={0x2ca29915, 0x709b, 0xe0eb, 0x8, 0x1, 0x326, 0x2}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'veth1_to_bond\x00', 0x400}) r6 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) ioctl$TIOCLINUX6(r6, 0x541c, &(0x7f0000000280)={0x6, 0x7}) 08:35:04 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:04 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:04 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0xc0000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480), 0xc, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20]}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, 0x0, 0x0, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffffffffffffd4}, 0x1, 0x0, 0x0, 0x404d110}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0xa, 0x4e1d, 0x6, @local, 0xfffffff8}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000002c0)="eaaf0505459c5185248da5f912ac4468f39c8a97af2610d3b56a67094e2f3af01a90a40055d28c84d322ee11ac76a1db26cbcb4fb5e73486070292beb214f41dcfca6a8e2d548e2b85a2dc79324dd1e40e88b4a0d7f994f82ea0fefba0486edd36ff1235fb2ecd9c7b4ac3c6b6219b2b096796e1eb36bbffb94942de7e0ac8bf916a8f07f803ee31c51aecb36cd4d683f32e02ffbfb906d35b0e5cb05f6203", 0x9f}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x5, @mcast2, 0x4000000}, 0x1c, &(0x7f00000009c0), 0x0, &(0x7f0000000b80), 0xfffffffffffffe57}}], 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="a9c488cea3f5af9f6d60658d83881aa5378b88f69cc7f62e411a9df497eec832571c66389753cc4447ac59530ba96d1e9cd640c51525e0eeda4c4d1cdf84ce3a5b0f3b861a9d7d4d078bf8af79b69b2ace3ee7204d4ebe92f71a4c9af137495b3e8f3a6c90a8c5a1d7532035f4c44c12404fef517e11d5646f97d7fb4f13beef7163f16c5e2001ee7dfb235293e83a9ebce40642fad490d96e5ca1a628afccc8cc51db4bcfc9f12a889f26c0dbd66d8ea574302a6fc712534dcf0ae9d329", 0xbe}], 0x1, 0x81808) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) write(0xffffffffffffffff, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f", 0x12) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r2, &(0x7f0000000640)="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", 0x261, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 08:35:04 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:05 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a182310b41c36e6cd07ca217136641fcefb0897a12a353db75981ae51b43a03c55e2f7a63659bd2df838"], 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="5160cb74afa59d082751cf3532992184fa3c075cebd583ffcc5defc80f1b0ca76b06e95eb26b3822959631369ec06618d7fc7be4a24098a2bb36230e2e2bbb0feab291f48ed475753635a151e093151a1f162177248d89bc8311f7d40b0796222e84bfbb282e2e17c2a83af44bf5397cce", 0x71, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='big_key\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') pause() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) 08:35:05 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x8082) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) setxattr$security_ima(0x0, &(0x7f0000000300)='security.ima\x00', 0x0, 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000340)={0x0, {0x800, 0x4}}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000240)={{r3, r4+30000000}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x280, 0x0, 0x20, 0x70bd2b, 0x0, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf89}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x837}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x303}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb31f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5c1}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x80}, 0x9fa1b076394c0619) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="a7724bdef643460000b7b0f781d1d3abf9d1a51c4bfce1e70251a8bd678625f508300200000042847bc2fdffe8cd918b035041291559f3ee3a46069062af9680d512f4d8a5c51817c3ff01a1f62ac71e85445d8f244f6be479ffffffffff8756ea7d486588272169d8b90f1d7106f5776f8811e658a49a000000000000bf67a33b39257dc9d93b5e79e3b0eb6bb4f7e6de42a1f31bdef22c843041f583c23df73b7d2c8871b0bf1cc397025a578b7bcbc66b249179519ea9c1fdfe7b45a3cf9071a70b7b75837756100af401040943891fb5bf977a08"], 0xea) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) 08:35:05 executing program 2: add_key$keyring(&(0x7f00000008c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, r0) request_key(&(0x7f0000000800)='dns_resolver\x00', &(0x7f0000000840)={'\x00', 0x3}, &(0x7f0000000880)='./cgroup.net/syz1\x00', r0) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r1) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r4 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0xd8f}, 0x1c) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000180)={0x3, 0x0, 0x101, 0x1, {0x4, 0x0, 0x80000000, 0x3}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x18, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000940)='?dev/a5\xc8\xb3x\xac\xeb\v#R\xb8\x9a\xa2', 0x200000, 0x261801) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c0000001c0008002cbd70000000000015000000e4b60a7990192b4093f3f4149f23ac1195e1472afb2648a425e0de058b579c12c08410d140efe5f1aeeabe5b956b6e7a78786b9c1b14634bb902bf11c43cf43ddc812ed94e724208bcdeeeb1b37fff107aaf0e8d87af30d4ea9ab1bf836ea79bff576f118bea7f55f2c93cbc8ffc9d4d0e191b7726680f0729d27f9ec90b0000000000000000"], 0x9c}}, 0x4000000) r6 = syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x0, 0x105000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700140001008e0000c09100e905a3000800"], 0x12) fsmount(r6, 0x0, 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) sendto$packet(r5, &(0x7f0000000240), 0x0, 0x4000, &(0x7f0000000400)={0x11, 0x8, 0x0, 0x1, 0xfe, 0x6, @random="2e17d5349ce9"}, 0x14) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x40, 0x410000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="2f62d92cc3680a66c1fe1e1bc8b98b9d05795f38e9bb9d3c5573e88d8aa6ee0200000049bbd103000000665c64d2aa5adf007f000000000000347a75dc3b7dded7e006f2"], 0x0) sendfile(r3, r3, 0x0, 0x40fdf) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x14) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x1, 0x0) 08:35:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) flock(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d0000000000000000000000b9943add2d42e256bcde25a28b72a66e0ec6e7095fe70ae007720332d8910cfba4bef5d014e117ac302a2a8ea49da1"], 0x15) r3 = dup(r2) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000005c0)=0x100, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x12100, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000100)=0x57) setxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U+', 0x7}, 0x28, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x1000000, 0x0) 08:35:05 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='.\x00', 0xc0000080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000480), 0xc, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/20]}, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) preadv(r1, 0x0, 0x0, 0x29) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)=0xcb, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xffffffffffffffd4}, 0x1, 0x0, 0x0, 0x404d110}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0xa, 0x4e1d, 0x6, @local, 0xfffffff8}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000002c0)="eaaf0505459c5185248da5f912ac4468f39c8a97af2610d3b56a67094e2f3af01a90a40055d28c84d322ee11ac76a1db26cbcb4fb5e73486070292beb214f41dcfca6a8e2d548e2b85a2dc79324dd1e40e88b4a0d7f994f82ea0fefba0486edd36ff1235fb2ecd9c7b4ac3c6b6219b2b096796e1eb36bbffb94942de7e0ac8bf916a8f07f803ee31c51aecb36cd4d683f32e02ffbfb906d35b0e5cb05f6203", 0x9f}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x5, @mcast2, 0x4000000}, 0x1c, &(0x7f00000009c0), 0x0, &(0x7f0000000b80), 0xfffffffffffffe57}}], 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="a9c488cea3f5af9f6d60658d83881aa5378b88f69cc7f62e411a9df497eec832571c66389753cc4447ac59530ba96d1e9cd640c51525e0eeda4c4d1cdf84ce3a5b0f3b861a9d7d4d078bf8af79b69b2ace3ee7204d4ebe92f71a4c9af137495b3e8f3a6c90a8c5a1d7532035f4c44c12404fef517e11d5646f97d7fb4f13beef7163f16c5e2001ee7dfb235293e83a9ebce40642fad490d96e5ca1a628afccc8cc51db4bcfc9f12a889f26c0dbd66d8ea574302a6fc712534dcf0ae9d329", 0xbe}], 0x1, 0x81808) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) write(0xffffffffffffffff, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f", 0x12) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendto$inet(r2, &(0x7f0000000640)="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", 0x261, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) 08:35:05 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) setxattr$security_ima(0x0, &(0x7f0000000300)='security.ima\x00', 0x0, 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000340)={0x0, {0x800, 0x4}}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000240)={{r3, r4+30000000}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)={0x280, 0x0, 0x20, 0x70bd2b, 0x0, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}]}]}, @TIPC_NLA_LINK={0x58, 0x4, [@TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf89}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}, @TIPC_NLA_MEDIA={0x84, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA={0x3c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_LINK={0x44, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x837}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x303}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb31f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5c1}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x80}, 0x9fa1b076394c0619) write$P9_RREADLINK(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="a7724bdef643460000b7b0f781d1d3abf9d1a51c4bfce1e70251a8bd678625f508300200000042847bc2fdffe8cd918b035041291559f3ee3a46069062af9680d512f4d8a5c51817c3ff01a1f62ac71e85445d8f244f6be479ffffffffff8756ea7d486588272169d8b90f1d7106f5776f8811e658a49a000000000000bf67a33b39257dc9d93b5e79e3b0eb6bb4f7e6de42a1f31bdef22c843041f583c23df73b7d2c8871b0bf1cc397025a578b7bcbc66b249179519ea9c1fdfe7b45a3cf9071a70b7b75837756100af401040943891fb5bf977a08"], 0xea) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 264.562215][ T9712] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 264.572380][ T9712] FAT-fs (loop1): Filesystem has been set read-only [ 264.580004][ T9712] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) 08:35:05 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:06 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a182310b41c36e6cd07ca217136641fcefb0897a12a353db75981ae51b43a03c55e2f7a63659bd2df838"], 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="5160cb74afa59d082751cf3532992184fa3c075cebd583ffcc5defc80f1b0ca76b06e95eb26b3822959631369ec06618d7fc7be4a24098a2bb36230e2e2bbb0feab291f48ed475753635a151e093151a1f162177248d89bc8311f7d40b0796222e84bfbb282e2e17c2a83af44bf5397cce", 0x71, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='big_key\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') pause() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) 08:35:06 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:06 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 265.302401][ T9735] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 265.312194][ T9735] FAT-fs (loop1): Filesystem has been set read-only [ 265.322129][ T9735] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) 08:35:07 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a182310b41c36e6cd07ca217136641fcefb0897a12a353db75981ae51b43a03c55e2f7a63659bd2df838"], 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="5160cb74afa59d082751cf3532992184fa3c075cebd583ffcc5defc80f1b0ca76b06e95eb26b3822959631369ec06618d7fc7be4a24098a2bb36230e2e2bbb0feab291f48ed475753635a151e093151a1f162177248d89bc8311f7d40b0796222e84bfbb282e2e17c2a83af44bf5397cce", 0x71, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='big_key\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') pause() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) 08:35:07 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x802) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='e0G'], 0xb) read$FUSE(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000000)="73061af20f5b2b640e4642215683e471539552d0983ca70b35874207551048d72ebb6b9b48328b2566e63dd62fba813b550b629585bcfd7da9afd818582652e09d16", 0x42, 0x4403, &(0x7f0000000080)={0xa, 0x4e21, 0x4, @loopback, 0x1}, 0x1c) 08:35:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d000010) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) r6 = open(0x0, 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) r7 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r7, 0xc0347c03, &(0x7f0000000000)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x9, 0x5, &(0x7f0000000480)="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"}) sendfile(r5, r6, 0x0, 0x80001d000010) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) accept4$ax25(r4, &(0x7f0000000400)={{0x3, @null}, [@rose, @rose, @null, @netrom, @remote, @netrom, @null, @bcast]}, &(0x7f00000003c0)=0x48, 0x800) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x422481, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000280), &(0x7f0000000340)=0x4) pipe2(0x0, 0x0) 08:35:07 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:07 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fremovexattr(r0, &(0x7f0000000180)=@known='system.posix_acl_access\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000000008000200"/24, @ANYRES32=0x0, @ANYBLOB="3400030021657972696e6765746830766d6e6574316367726f7570707070315b6574683076626f786e6574317573657200000000"], 0x50}}, 0x0) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r4, r5) ioctl$SG_EMULATED_HOST(r2, 0xc0347c03, &(0x7f0000000000)) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000000)={0x1ff, 0x1, 0x3, 0xff}) 08:35:07 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:07 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:07 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) fallocate(r1, 0x41, 0x1ff, 0x2) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$jfs(&(0x7f00000013c0)='jfs\x00', &(0x7f0000001400)='./file0\x00', 0x8, 0x7, &(0x7f0000001a00)=[{&(0x7f0000001440)="c81c07d8eb454e43fbdd0e1a2bab520c5c9759097943b7c1be08e0f8abfed39fe4d8240ed8b112d8e397f6b633d81f52420f9e93fa8351a7460eca27a013370c94d914287653ca85a24deb5482e4f6e58109bda37e4a2cfcbe5d336fa67cc80b51c9ae3b1ff42d1f5bc50ed446fc70b63c1f71817fce19660e7d8511baee3e2302935013887444539637674b8d680c50ef214472ee16ff557d467d4f7372d216b39d2ea7176cdf40e8419206aba7bd3a2052d7e87c65445f3a411f0adbee5d2ab28fd23a39b12d6208b037", 0xcb, 0x1}, {&(0x7f0000001540)="e53317806c06e785f2a241917a7a64d6cc939eabbef4c279f783d0ac2e81ac801c1f02f311635d04101b90997a0cf36038a8849e615fe567f8b25f1684b937d9f538c1954d172603e2e03e34d2690e2141e841732ba9db759c50c67b575d172967926f994a3c04d723d7bf74687ae7c2a6b0cbffe8ee250b177b72715b2ef4867b3dbbaa6e57594d6f44864803741f5a570ba39507e01025a9bcd4115a4f849cdbe818278421269f37ea1430acb1330b1925774c67f65eb1487a35596b4a0845fc32a5d9f6b36605a54c405226cffe8f3fe6e0fd76ee25251345940ef9b70f00622e7332a397841e4aed03956b201571cc828e7280af", 0xf6, 0x4}, {&(0x7f0000001640)="18a6981cda9e97268117c99013013f5069e7968207d6c3d99bca4776bcc6ed1836407156bf139895abba170a38583c85516e151c2283bd74770a98933ba9fdfdb934dc4ba26f116de1f8ff15b8277b04f5f2045e0494d52bd6fee41685182cf49e91bd27328ff3647989a1d8ec2e7d15f7e294e56c0dfe89dd57cacdf7e352b1f7c8a90bd9e70e98c1719820fd3d234bfc5e66820aed6a3468679af0d854600b7963d04e5a56c5e9f01e54baa8b13f27a8aab49a2a0067b81d566ac33483eec1d29e13a9c9f3ae0528d9e88d6d66ff241c6e73866f5f9900515927303737a7d8bb32be", 0xe3, 0x9}, {&(0x7f0000001740)="bac15d194a81be3c8222a051fe5c92f291e9734ca83f87f24b51a8d88e2d3991b9b9a4c559d9342c2f0c602e34ce8dcca5329c63f06195dcd5ad825d530957eb3db948d27a8b47de58de3500fcd927b265bec773798f5c39eb7a6081befe9381e586f1665c8cd0f46e8d780578c1a48879a576c2a772ea290a85ca0a7c5b1d79407691007d03c1312f68e527516d5bfd5a4d066d", 0x94, 0x5}, {&(0x7f0000001800)="cf6a029af9e7634804d6b3e99f4d476d39cc769173d1aea4b675fc413420fcd022146d1748a5cfc24263814c61a5437a04313b8540e4cf1205c8688e3b1a4de467043fdcf515de2caf6ab167826a1391b819b91ca44b5ae99c5a859f5a2a1df5c7b9e66f96df6f34ab57022fc7d65337ed0a5af51469cc1cad9ee75ca654aaa6c1789e937d07c296247fb358ac6a98b89f364075b3c71225efcd9ed567d1080314943a73d90df7586b627fa07bbcd3237182791d9c804bb300e27bed75528a81cd841a2414b5fb2ae789ea5bdfc85dfa10353efc5fe787dd364974336810482c102cf9d96d198ca7b513105a81ac115b8ee4172565effc", 0xf7, 0xdc}, {&(0x7f0000001900)="7dbcfd27720793a643f32c6c4733060bb444e10d328c220c460190e7c6ebf0b77ea6ad6e91888ad520bb6aef45932491a54deb6cfb5f2be8ef3601120988d7d36e68abc52619d1fe8f1bc04a2320865ae3f1e196a6c30dc17e61627a108e43faa050da2bb5c448980de756e406dd350b5ffb214e0a86b8c494b7d0", 0x7b, 0x5a}, {&(0x7f0000001980)="49cf127d5bd4469210407faa0d7a96f4fd403c4585e652516b56348b66a45f195e4134782413ea0c48ed41689d14e6939b0a442e00441eb25eabc9cd58bdda0dd75ede65fe81a0b76f98f2dc8029170cb5fe2947d22710dca7317136893d6ecfb6188b4c360f7ea06275717760deb9c57e9fb5f09816a8ed", 0x78, 0x6}], 0x800000, &(0x7f0000001ac0)={[{@resize='resize'}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@errors_remount='errors=remount-ro'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}]}) close(r1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000aa2000/0x3000)=nil, &(0x7f000013b000/0xd000)=nil, 0x3000, 0xc620786ddf4ef3fa}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffdad) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000001340)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000340)=""/4096}, &(0x7f0000000180)=0x78) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f00000002c0)=""/109, &(0x7f0000000240)=0x6d) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x101001) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000001b40)={0x3}) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) lseek(r3, 0x8000, 0x3) 08:35:07 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) r1 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000300)={0x7, 0x7, r0, 0x0, r1, 0x0, 0x1b4, 0xffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0x400454cc, r1) ioctl$SG_EMULATED_HOST(r2, 0xc0347c03, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r4) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, r5, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c72b4b887cd505c14b19920e2f776566f6f746d6f64653d30303030303030bd12ea5b30303030303030", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=r5, @ANYBLOB=',allow_other,max_read=0x000000000000003f,default_permissions,fsuuid=!c1ca\x00da-d8f9-da=3-ef3\x00-c\x009cc;d\f,\x00']) r6 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@local, 0x1, 0xffff, 0x4, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x8001}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10000000}}, 0xe8) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x8}, 0x1c) sendmmsg(r6, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 266.452419][ T9787] JFS: Cannot determine volume size [ 266.480337][ T9787] jfs: Unrecognized mount option "func=CREDS_CHECK" or missing value [ 266.670684][ T9793] JFS: Cannot determine volume size [ 266.676069][ T9793] jfs: Unrecognized mount option "func=CREDS_CHECK" or missing value 08:35:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xffffffffffffff71, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe4, r2, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x13}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5c}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x2b}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4b34e042}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fff}]}, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$isdn(0x22, 0x3, 0x21) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000000)='bcsf0\x00') ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000280)=ANY=[@ANYBLOB="c8f592087eeb34933984"], 0x22832eda94db7ca5) 08:35:08 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x6, 0x8, 0x444, 0x5}, 0x37, [0x3, 0xfffffc00, 0x9, 0xc0000, 0x6, 0x8, 0x5, 0xfff, 0x1, 0x3, 0x5, 0x49, 0x7ff, 0x3f, 0x5, 0x5b400000, 0x688d, 0x101, 0x3ff, 0x9, 0x80000000, 0x7, 0x2, 0x4, 0x3, 0x3, 0xff, 0x81, 0x1f, 0x1061, 0x8, 0x800, 0x6, 0x6, 0x0, 0x2, 0x6, 0x9, 0x80000000, 0x7, 0xfffffffa, 0xb29a, 0x101, 0x6, 0x6, 0x400, 0x200, 0x9, 0x7f, 0x4, 0x1, 0x6ce, 0x6, 0x3, 0x1ff, 0x1ea, 0x9, 0x5ee4, 0x58, 0x299, 0x3, 0x1ff, 0x3, 0xe4b0000], [0x101, 0xffffffff, 0xffffffff, 0x8001, 0x80000001, 0x5, 0x9, 0xfa, 0x3, 0x8, 0x0, 0x30, 0x1, 0x5, 0x80000000, 0xffffffff, 0x0, 0x0, 0x3f000000, 0x1a, 0x3, 0x4, 0x1ff, 0x2, 0x4, 0x8, 0x109, 0x7, 0x6, 0x400, 0x7, 0x7, 0x7, 0x0, 0x80, 0xffff, 0x8, 0x1, 0x0, 0x8, 0x8, 0xff, 0x9, 0x0, 0x4, 0x4, 0x0, 0x80, 0x9, 0x9, 0x64, 0x842, 0xee48, 0x9, 0x3, 0x1, 0x7f, 0xffffff65, 0x6, 0x2, 0x10, 0x401, 0xff, 0x80000000], [0x400, 0x1ff, 0x2, 0x8000, 0x7, 0x8, 0x20, 0xe95, 0x6, 0xe69, 0x8, 0x164, 0xd, 0x200, 0xffffffc1, 0x9, 0x7, 0x5, 0x7, 0x543b, 0x5, 0x1, 0x3, 0x0, 0x2, 0x7, 0x3ff, 0xe08, 0x8, 0x6, 0x5490, 0x99, 0x8000, 0x6, 0x9, 0xffffffc1, 0x9, 0x6, 0x2e8, 0xff, 0x0, 0x280000, 0xffffffff, 0x1ff, 0x80000001, 0x40, 0x4, 0x7f, 0x439d, 0x20, 0x5, 0x4, 0x4, 0x6, 0x3, 0x0, 0x80000000, 0x0, 0x2, 0xb5d4, 0xc7d7, 0x200, 0x80000001, 0x1], [0x8, 0x8, 0x2d140, 0x2, 0x7, 0x29, 0xd30c, 0xffffff00, 0x600000, 0xffffff81, 0x1, 0x1023, 0xa4e, 0x0, 0x6, 0xb5b, 0x8000, 0x4a3, 0x7, 0xfff, 0x5, 0x1, 0x3, 0xfffffffc, 0x1, 0xaf, 0xb488, 0x2, 0x2, 0x1ff, 0x1, 0x3a1, 0x7, 0xffffffff, 0x1, 0x71, 0x3f, 0x9, 0x4, 0x8, 0x3, 0x8, 0x1, 0x8001, 0x100, 0x9, 0x1f, 0xfffffc00, 0x7, 0x6, 0x7fffffff, 0x2, 0x0, 0x9, 0x8fd0, 0x2, 0x5, 0xa6e9, 0x20, 0x100, 0x2, 0x5, 0x6, 0x5]}, 0x45c) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d000010) r5 = socket$inet6(0xa, 0x2, 0x0) close(r5) r6 = open(0x0, 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) r7 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r7, 0xc0347c03, &(0x7f0000000000)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x9, 0x5, &(0x7f0000000480)="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"}) sendfile(r5, r6, 0x0, 0x80001d000010) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000300)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r2}}, 0x18) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x4924b68, 0x0) accept4$ax25(r4, &(0x7f0000000400)={{0x3, @null}, [@rose, @rose, @null, @netrom, @remote, @netrom, @null, @bcast]}, &(0x7f00000003c0)=0x48, 0x800) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x422481, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000280), &(0x7f0000000340)=0x4) pipe2(0x0, 0x0) 08:35:08 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x2000002) fallocate(r1, 0x0, 0x0, 0x10fffc) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) socket$inet(0x2, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000148140a182310b41c36e6cd07ca217136641fcefb0897a12a353db75981ae51b43a03c55e2f7a63659bd2df838"], 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x2, 0x8, 0x8001, 0x2e}, 0x10) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="5160cb74afa59d082751cf3532992184fa3c075cebd583ffcc5defc80f1b0ca76b06e95eb26b3822959631369ec06618d7fc7be4a24098a2bb36230e2e2bbb0feab291f48ed475753635a151e093151a1f162177248d89bc8311f7d40b0796222e84bfbb282e2e17c2a83af44bf5397cce", 0x71, 0xfffffffffffffffa) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000140)='big_key\x00', &(0x7f0000000240)=@builtin='builtin_trusted\x00') pause() openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) 08:35:08 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xffffffffffffffe5, &(0x7f00000000c0), 0x1, 0x0, 0xffffffffffffff2c}, 0x0) 08:35:08 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) fallocate(r1, 0x41, 0x1ff, 0x2) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$jfs(&(0x7f00000013c0)='jfs\x00', &(0x7f0000001400)='./file0\x00', 0x8, 0x7, &(0x7f0000001a00)=[{&(0x7f0000001440)="c81c07d8eb454e43fbdd0e1a2bab520c5c9759097943b7c1be08e0f8abfed39fe4d8240ed8b112d8e397f6b633d81f52420f9e93fa8351a7460eca27a013370c94d914287653ca85a24deb5482e4f6e58109bda37e4a2cfcbe5d336fa67cc80b51c9ae3b1ff42d1f5bc50ed446fc70b63c1f71817fce19660e7d8511baee3e2302935013887444539637674b8d680c50ef214472ee16ff557d467d4f7372d216b39d2ea7176cdf40e8419206aba7bd3a2052d7e87c65445f3a411f0adbee5d2ab28fd23a39b12d6208b037", 0xcb, 0x1}, {&(0x7f0000001540)="e53317806c06e785f2a241917a7a64d6cc939eabbef4c279f783d0ac2e81ac801c1f02f311635d04101b90997a0cf36038a8849e615fe567f8b25f1684b937d9f538c1954d172603e2e03e34d2690e2141e841732ba9db759c50c67b575d172967926f994a3c04d723d7bf74687ae7c2a6b0cbffe8ee250b177b72715b2ef4867b3dbbaa6e57594d6f44864803741f5a570ba39507e01025a9bcd4115a4f849cdbe818278421269f37ea1430acb1330b1925774c67f65eb1487a35596b4a0845fc32a5d9f6b36605a54c405226cffe8f3fe6e0fd76ee25251345940ef9b70f00622e7332a397841e4aed03956b201571cc828e7280af", 0xf6, 0x4}, {&(0x7f0000001640)="18a6981cda9e97268117c99013013f5069e7968207d6c3d99bca4776bcc6ed1836407156bf139895abba170a38583c85516e151c2283bd74770a98933ba9fdfdb934dc4ba26f116de1f8ff15b8277b04f5f2045e0494d52bd6fee41685182cf49e91bd27328ff3647989a1d8ec2e7d15f7e294e56c0dfe89dd57cacdf7e352b1f7c8a90bd9e70e98c1719820fd3d234bfc5e66820aed6a3468679af0d854600b7963d04e5a56c5e9f01e54baa8b13f27a8aab49a2a0067b81d566ac33483eec1d29e13a9c9f3ae0528d9e88d6d66ff241c6e73866f5f9900515927303737a7d8bb32be", 0xe3, 0x9}, {&(0x7f0000001740)="bac15d194a81be3c8222a051fe5c92f291e9734ca83f87f24b51a8d88e2d3991b9b9a4c559d9342c2f0c602e34ce8dcca5329c63f06195dcd5ad825d530957eb3db948d27a8b47de58de3500fcd927b265bec773798f5c39eb7a6081befe9381e586f1665c8cd0f46e8d780578c1a48879a576c2a772ea290a85ca0a7c5b1d79407691007d03c1312f68e527516d5bfd5a4d066d", 0x94, 0x5}, {&(0x7f0000001800)="cf6a029af9e7634804d6b3e99f4d476d39cc769173d1aea4b675fc413420fcd022146d1748a5cfc24263814c61a5437a04313b8540e4cf1205c8688e3b1a4de467043fdcf515de2caf6ab167826a1391b819b91ca44b5ae99c5a859f5a2a1df5c7b9e66f96df6f34ab57022fc7d65337ed0a5af51469cc1cad9ee75ca654aaa6c1789e937d07c296247fb358ac6a98b89f364075b3c71225efcd9ed567d1080314943a73d90df7586b627fa07bbcd3237182791d9c804bb300e27bed75528a81cd841a2414b5fb2ae789ea5bdfc85dfa10353efc5fe787dd364974336810482c102cf9d96d198ca7b513105a81ac115b8ee4172565effc", 0xf7, 0xdc}, {&(0x7f0000001900)="7dbcfd27720793a643f32c6c4733060bb444e10d328c220c460190e7c6ebf0b77ea6ad6e91888ad520bb6aef45932491a54deb6cfb5f2be8ef3601120988d7d36e68abc52619d1fe8f1bc04a2320865ae3f1e196a6c30dc17e61627a108e43faa050da2bb5c448980de756e406dd350b5ffb214e0a86b8c494b7d0", 0x7b, 0x5a}, {&(0x7f0000001980)="49cf127d5bd4469210407faa0d7a96f4fd403c4585e652516b56348b66a45f195e4134782413ea0c48ed41689d14e6939b0a442e00441eb25eabc9cd58bdda0dd75ede65fe81a0b76f98f2dc8029170cb5fe2947d22710dca7317136893d6ecfb6188b4c360f7ea06275717760deb9c57e9fb5f09816a8ed", 0x78, 0x6}], 0x800000, &(0x7f0000001ac0)={[{@resize='resize'}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@errors_remount='errors=remount-ro'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}]}) close(r1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000aa2000/0x3000)=nil, &(0x7f000013b000/0xd000)=nil, 0x3000, 0xc620786ddf4ef3fa}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffdad) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000001340)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000340)=""/4096}, &(0x7f0000000180)=0x78) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f00000002c0)=""/109, &(0x7f0000000240)=0x6d) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x101001) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000001b40)={0x3}) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) lseek(r3, 0x8000, 0x3) 08:35:08 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x812040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:08 executing program 0: set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) r0 = syz_open_dev$sndpcmp(0x0, 0x7fff, 0x101000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@remote, @in=@dev}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000000)={0x10}) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000052700000000000000f5ff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r7, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) sendto$packet(r3, &(0x7f0000000440)="3ba2f734328ec7c9cdd05bb6e61239ee8404cf78e1466c642498ec7b5d38ace25d1c20f67aae287e18e7e381f03595b01908d7c8b1ecd0748ba325dd52d62f361ecab2825e0ed2e8368c191a6b030b035284531f311a4654c3c213691f7439f7f6d664edde0cfc7292b304150eebbcc445850fabab51f886ab70b3e1c534b6839406c88d2f66773cf29168f2e811112869bf2dfb35cc3305a2e50a74c69665e0e302ac71d6ed124d71894b4af238f073e7389922633d01ee01c5878210fcbcf6566cbc7f9708a60fbe81c8110f8f85a9e36be7d18b8f2b457cb01066d5360052", 0xe0, 0x4000000, &(0x7f0000000540)={0x11, 0x1, r7, 0x1, 0x40, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) ftruncate(r9, 0x1000000) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000100)={0x77359400}, 0x10) sendfile(r1, r9, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 08:35:08 executing program 1: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000003000/0x2000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r2, 0xc0347c03, &(0x7f0000000000)) bind$rose(r2, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r3 = dup(0xffffffffffffffff) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip_vti0\x00', 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) chroot(&(0x7f00000000c0)='./file0\x00') connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xfffffffc, @mcast1, 0x800000007}, 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f00000002c0), 0x4) 08:35:08 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000380)={0xffff, {{0xa, 0x4e24, 0x9a, @loopback, 0x10000}}}, 0x88) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0xc7, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="006abb62997edc1caf7867cd4fe6c5f44603375caaa3ab4ad345d3781a50180a1eb5f492ce88776f47fd58f6cd2f2a82d61d089e9fe49e4de25f4994a1fa809a43f5b80d3350dbcde9d3a4474054343bf59566eeb9c81fb64335005eaf5e3d7402c39ff45e7dfc851efa6fa418a18647704769ec4cfd23c137829525bd527bfe52881cf1a57f74c84ba89f3f", @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000014000100706669666f5f686561645f64726f70000800020000000000"], 0x3}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0xffffffffffffff31, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002500070510000b000000000000000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff00000000240008001c00010000000000000000000000000000000000000000000000000004000200"], 0x48}}, 0x0) [ 267.526715][ T9838] JFS: Cannot determine volume size 08:35:08 executing program 1: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000003000/0x2000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r2, 0xc0347c03, &(0x7f0000000000)) bind$rose(r2, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r3 = dup(0xffffffffffffffff) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip_vti0\x00', 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) chroot(&(0x7f00000000c0)='./file0\x00') connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xfffffffc, @mcast1, 0x800000007}, 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f00000002c0), 0x4) 08:35:08 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 267.628977][ T9838] jfs: Unrecognized mount option "func=CREDS_CHECK" or missing value 08:35:08 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='#! ./file0 '], 0xb) fallocate(r1, 0x41, 0x1ff, 0x2) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$jfs(&(0x7f00000013c0)='jfs\x00', &(0x7f0000001400)='./file0\x00', 0x8, 0x7, &(0x7f0000001a00)=[{&(0x7f0000001440)="c81c07d8eb454e43fbdd0e1a2bab520c5c9759097943b7c1be08e0f8abfed39fe4d8240ed8b112d8e397f6b633d81f52420f9e93fa8351a7460eca27a013370c94d914287653ca85a24deb5482e4f6e58109bda37e4a2cfcbe5d336fa67cc80b51c9ae3b1ff42d1f5bc50ed446fc70b63c1f71817fce19660e7d8511baee3e2302935013887444539637674b8d680c50ef214472ee16ff557d467d4f7372d216b39d2ea7176cdf40e8419206aba7bd3a2052d7e87c65445f3a411f0adbee5d2ab28fd23a39b12d6208b037", 0xcb, 0x1}, {&(0x7f0000001540)="e53317806c06e785f2a241917a7a64d6cc939eabbef4c279f783d0ac2e81ac801c1f02f311635d04101b90997a0cf36038a8849e615fe567f8b25f1684b937d9f538c1954d172603e2e03e34d2690e2141e841732ba9db759c50c67b575d172967926f994a3c04d723d7bf74687ae7c2a6b0cbffe8ee250b177b72715b2ef4867b3dbbaa6e57594d6f44864803741f5a570ba39507e01025a9bcd4115a4f849cdbe818278421269f37ea1430acb1330b1925774c67f65eb1487a35596b4a0845fc32a5d9f6b36605a54c405226cffe8f3fe6e0fd76ee25251345940ef9b70f00622e7332a397841e4aed03956b201571cc828e7280af", 0xf6, 0x4}, {&(0x7f0000001640)="18a6981cda9e97268117c99013013f5069e7968207d6c3d99bca4776bcc6ed1836407156bf139895abba170a38583c85516e151c2283bd74770a98933ba9fdfdb934dc4ba26f116de1f8ff15b8277b04f5f2045e0494d52bd6fee41685182cf49e91bd27328ff3647989a1d8ec2e7d15f7e294e56c0dfe89dd57cacdf7e352b1f7c8a90bd9e70e98c1719820fd3d234bfc5e66820aed6a3468679af0d854600b7963d04e5a56c5e9f01e54baa8b13f27a8aab49a2a0067b81d566ac33483eec1d29e13a9c9f3ae0528d9e88d6d66ff241c6e73866f5f9900515927303737a7d8bb32be", 0xe3, 0x9}, {&(0x7f0000001740)="bac15d194a81be3c8222a051fe5c92f291e9734ca83f87f24b51a8d88e2d3991b9b9a4c559d9342c2f0c602e34ce8dcca5329c63f06195dcd5ad825d530957eb3db948d27a8b47de58de3500fcd927b265bec773798f5c39eb7a6081befe9381e586f1665c8cd0f46e8d780578c1a48879a576c2a772ea290a85ca0a7c5b1d79407691007d03c1312f68e527516d5bfd5a4d066d", 0x94, 0x5}, {&(0x7f0000001800)="cf6a029af9e7634804d6b3e99f4d476d39cc769173d1aea4b675fc413420fcd022146d1748a5cfc24263814c61a5437a04313b8540e4cf1205c8688e3b1a4de467043fdcf515de2caf6ab167826a1391b819b91ca44b5ae99c5a859f5a2a1df5c7b9e66f96df6f34ab57022fc7d65337ed0a5af51469cc1cad9ee75ca654aaa6c1789e937d07c296247fb358ac6a98b89f364075b3c71225efcd9ed567d1080314943a73d90df7586b627fa07bbcd3237182791d9c804bb300e27bed75528a81cd841a2414b5fb2ae789ea5bdfc85dfa10353efc5fe787dd364974336810482c102cf9d96d198ca7b513105a81ac115b8ee4172565effc", 0xf7, 0xdc}, {&(0x7f0000001900)="7dbcfd27720793a643f32c6c4733060bb444e10d328c220c460190e7c6ebf0b77ea6ad6e91888ad520bb6aef45932491a54deb6cfb5f2be8ef3601120988d7d36e68abc52619d1fe8f1bc04a2320865ae3f1e196a6c30dc17e61627a108e43faa050da2bb5c448980de756e406dd350b5ffb214e0a86b8c494b7d0", 0x7b, 0x5a}, {&(0x7f0000001980)="49cf127d5bd4469210407faa0d7a96f4fd403c4585e652516b56348b66a45f195e4134782413ea0c48ed41689d14e6939b0a442e00441eb25eabc9cd58bdda0dd75ede65fe81a0b76f98f2dc8029170cb5fe2947d22710dca7317136893d6ecfb6188b4c360f7ea06275717760deb9c57e9fb5f09816a8ed", 0x78, 0x6}], 0x800000, &(0x7f0000001ac0)={[{@resize='resize'}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@errors_remount='errors=remount-ro'}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}], [{@func={'func', 0x3d, 'CREDS_CHECK'}}]}) close(r1) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000aa2000/0x3000)=nil, &(0x7f000013b000/0xd000)=nil, 0x3000, 0xc620786ddf4ef3fa}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffdad) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000001340)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000340)=""/4096}, &(0x7f0000000180)=0x78) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f00000002c0)=""/109, &(0x7f0000000240)=0x6d) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x101001) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000001b40)={0x3}) ptrace$setopts(0x4206, r0, 0x0, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) lseek(r3, 0x8000, 0x3) 08:35:09 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x94104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e22, 0x4, @ipv4={[], [], @local}, 0x7a4}}}, 0x84) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) 08:35:09 executing program 1: perf_event_open(&(0x7f00000010c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r0, &(0x7f0000003000/0x2000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r2, 0xc0347c03, &(0x7f0000000000)) bind$rose(r2, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) r3 = dup(0xffffffffffffffff) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='ip_vti0\x00', 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) chroot(&(0x7f00000000c0)='./file0\x00') connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xfffffffc, @mcast1, 0x800000007}, 0x1c) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x0, &(0x7f00000002c0), 0x4) 08:35:09 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x94104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e22, 0x4, @ipv4={[], [], @local}, 0x7a4}}}, 0x84) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) 08:35:09 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:09 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x94104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e22, 0x4, @ipv4={[], [], @local}, 0x7a4}}}, 0x84) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) 08:35:09 executing program 0: set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) r0 = syz_open_dev$sndpcmp(0x0, 0x7fff, 0x101000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@remote, @in=@dev}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000080)=0xe8) ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000000)={0x10}) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r3, 0xc0347c03, &(0x7f0000000000)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000052700000000000000f5ff000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000008433df6d6f6b577d4eaaf2000007"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r7, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) sendto$packet(r3, &(0x7f0000000440)="3ba2f734328ec7c9cdd05bb6e61239ee8404cf78e1466c642498ec7b5d38ace25d1c20f67aae287e18e7e381f03595b01908d7c8b1ecd0748ba325dd52d62f361ecab2825e0ed2e8368c191a6b030b035284531f311a4654c3c213691f7439f7f6d664edde0cfc7292b304150eebbcc445850fabab51f886ab70b3e1c534b6839406c88d2f66773cf29168f2e811112869bf2dfb35cc3305a2e50a74c69665e0e302ac71d6ed124d71894b4af238f073e7389922633d01ee01c5878210fcbcf6566cbc7f9708a60fbe81c8110f8f85a9e36be7d18b8f2b457cb01066d5360052", 0xe0, 0x4000000, &(0x7f0000000540)={0x11, 0x1, r7, 0x1, 0x40, 0x6, @broadcast}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x5) ftruncate(r9, 0x1000000) setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000100)={0x77359400}, 0x10) sendfile(r1, r9, &(0x7f00000000c0)=0xf18001, 0xeefffdef) 08:35:09 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:10 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:10 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @local}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0xc0347c03, &(0x7f0000000000)) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 08:35:10 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:10 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 269.396536][ T9914] device team0 entered promiscuous mode [ 269.423273][ T9914] device team_slave_0 entered promiscuous mode [ 269.460254][ T9914] device team_slave_1 entered promiscuous mode [ 269.523218][ T9914] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.711272][ T9913] device team0 left promiscuous mode [ 269.716745][ T9913] device team_slave_0 left promiscuous mode [ 269.722960][ T9913] device team_slave_1 left promiscuous mode 08:35:12 executing program 2: socket$packet(0x11, 0xc891f71b6c819a61, 0x300) r0 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r1 = open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r1, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000640)='./file0/file0\x00', 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x80) r5 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) getresuid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) r6 = socket(0xa, 0x0, 0x6) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x3f}, 0x10) getpgid(r0) 08:35:12 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x94104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e22, 0x4, @ipv4={[], [], @local}, 0x7a4}}}, 0x84) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) 08:35:12 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:12 executing program 0: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8, 0x6, 0x42956152, 0x8, 0x10}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000001400)=@assoc_value={r1, 0x3}, &(0x7f0000001440)=0x8) r2 = semget$private(0x0, 0x3, 0x1a0) getrandom(&(0x7f0000000080)=""/37, 0xfffffffffffffdcc, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x109e40, 0x0) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f00000002c0)={0x20, 0x7e28264f12c6a18, &(0x7f0000000280)="996250600e8defd4c90506c69480d0575b4019c884568b990d82e1b5712a2ff163eb4383e3695f28ae6659354a2691", {0x3, 0x8, 0x3136564e, 0xe, 0x2, 0x0, 0x6, 0x2}}) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000100)=""/178) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4040, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000000c0)={0x0, 0x0, 0x1}) r5 = socket$inet6(0xa, 0xb, 0x1f) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000000), &(0x7f00000001c0)=0x8) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0xffc00}], 0xe, 0x0) 08:35:12 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @local}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0xc0347c03, &(0x7f0000000000)) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 08:35:12 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x94104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000000)={r4, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e22, 0x4, @ipv4={[], [], @local}, 0x7a4}}}, 0x84) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r5, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x3e8, 0x0, 0xffffffd8) 08:35:12 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], &(0x7f0000000180)=""/208, 0x2f, 0xd0, 0x1}, 0xfffffffffffffeaf) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) [ 270.883759][ T9930] device team0 entered promiscuous mode [ 270.907177][ T9930] device team_slave_0 entered promiscuous mode [ 270.929605][ T9930] device team_slave_1 entered promiscuous mode 08:35:12 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 271.027958][ T9930] 8021q: adding VLAN 0 to HW filter on device team0 08:35:12 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101400, 0x0) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r3, &(0x7f00000001c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b40000000000000079109000000000d5b8810061000000000000009500000000000000892267951c6c284dec85d6df18422df958596320c0c8e7349a4794562593"], &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x181100, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000000c0)=0x4, 0x4) 08:35:12 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:12 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01000002", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x8, 0xd9d}, &(0x7f0000000100)=0x8) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000240)={0x8, 0x7, 0x1a, &(0x7f0000000200)="21aad2472cb135281de335cd63b2891db25a33997a0239cd01d4"}) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000400)='ramfs\x00\x9b\x95\x84\x10D\xfb\x9b\x81R#\x10O\xd3\xb4\xe8\xa3\x1f\x00\r\xf6\xd9\xbbt\x95f\x9e\x02\x06\xf946\\{(\xc8\xa7s\xd2>\x81\x88l\x0e\xc5%\x99\x00\x02\x9d\x85\xfc\xa9\\\x99:\xe4\x9c\xf9z>w\xe7\xa9\xa8=\xe9o\x9f\xfbKE\xd7\x9a\x1b\xf8\x86@\x8e\xe6\x9em\x89\xab\x19\xea1\x8e\xa1\xb5\xd7\xc6\xc62\x05\xc7\xe5\xd2m\xeczV\x1d\x84\xcd\xc0\xdf', 0x0, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) open(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 08:35:12 executing program 2: socket$packet(0x11, 0xc891f71b6c819a61, 0x300) r0 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r1 = open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r1, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000640)='./file0/file0\x00', 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x80) r5 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) getresuid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) r6 = socket(0xa, 0x0, 0x6) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x3f}, 0x10) getpgid(r0) 08:35:12 executing program 4: socket$packet(0x11, 0xc891f71b6c819a61, 0x300) r0 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r1 = open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r1, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000640)='./file0/file0\x00', 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x80) r5 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) getresuid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) r6 = socket(0xa, 0x0, 0x6) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x3f}, 0x10) getpgid(r0) 08:35:13 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:13 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) link(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff63) timerfd_create(0x0, 0x100000) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e24, 0x5, @empty}, {0xa, 0x0, 0x0, @local}, 0xfffc, [0x0, 0xfffffffc, 0x400, 0xb5, 0x9, 0x7, 0x9]}, 0x5c) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, &(0x7f0000000400)) syz_open_dev$sg(0x0, 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000001ac1414aa0000ff0002000000979d108d255c57d06b6830cea30e51dd12e44605b0a039de23f3024a964bd456a69a399e53388872ef6ab25648995cbd4e8d45083da79145af46b40bfef4c7a631b8de9876c8749cb0bc791b74fa9365b76a87a2f2c643ba257793323f9e5dedd97b5fe023c2"], 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(0xffffffffffffffff, 0x4040ae72, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') pwritev(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x40fdf) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x1000) 08:35:13 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r3, 0x1}, &(0x7f00000000c0)=0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000100)) r6 = dup(r5) ioctl$VT_DISALLOCATE(r6, 0x5608) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x0) 08:35:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0xc0347c03, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x400, 0x3e, 0xc002, 0x1, 0x1, 0x10001, 0x2, 0x6, 0x0}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="4d000000cd7cf48db1de8a278a0bdffe1ac053e4abe473218399d6385eb0ecbbbbbdb3aa189697e39f4c807ef06b4c0826069b5fe5cb6eb1117f65dc71531f51158017697175e63ecafb16a5ca54b1ffa0"], &(0x7f0000000240)=0x55) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x6, 0x0, 0xee01, 0x0, 0xee01, 0x80, 0x319a}, 0x81, 0x4, 0x0, 0x20, 0x0, r5, 0x200}) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) fcntl$getownex(r6, 0x10, &(0x7f0000000300)={0x0, 0x0}) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x24, 0x33, 0x119, 0x0, 0x0, {0x3}, [@nested={0xc, 0x3b, [@typed={0x8, 0x68, @pid=r7}]}, @nested={0x4, 0x1}]}, 0x24}}, 0x0) pipe2(&(0x7f0000000080), 0x4800) rt_sigpending(&(0x7f0000000040), 0x8) 08:35:13 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={[{@fat=@usefree='usefree'}]}) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1, 0x400800) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='usefree', 0x7) [ 272.035385][ T9997] net_ratelimit: 2 callbacks suppressed [ 272.044871][ T9997] openvswitch: netlink: Either Ethernet header or EtherType is required. 08:35:13 executing program 2: socket$packet(0x11, 0xc891f71b6c819a61, 0x300) r0 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r1 = open(0x0, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', r1, 0x0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000000c0)='./file0\x00') mkdirat(r2, &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000180)='./file0\x00', r2, &(0x7f0000000640)='./file0/file0\x00', 0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x80) r5 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0xff00) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) getresuid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) r6 = socket(0xa, 0x0, 0x6) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x6}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast1, @in=@dev}}, {{@in=@loopback}}}, &(0x7f0000000480)=0xe8) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @rand_addr=0x3f}, 0x10) getpgid(r0) 08:35:13 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8) getpgrp(0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {0x6}]}) r1 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0xc0347c03, &(0x7f0000000000)) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000140)) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000100)) 08:35:13 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 272.082034][ T9997] openvswitch: netlink: Either Ethernet header or EtherType is required. 08:35:13 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x10, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x1c, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x8, 0x40) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@remote}}, {{@in6=@ipv4}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) r4 = syz_open_procfs(0x0, 0x0) read(r4, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r8) r9 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r11) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r12) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r5}, {0x2, 0x0, r6}, {0x2, 0x8, r8}, {0x2, 0x1, r10}], {0x4, 0x4}, [{0x8, 0xc, r11}, {0x8, 0x2, r12}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x2) r13 = syz_open_procfs(0x0, 0x0) read(r13, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r17) r18 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r20) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r21) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r14, @ANYBLOB="02000000", @ANYRES32=r15, @ANYBLOB="0856a40952073b02", @ANYRES32=r17, @ANYBLOB="02000100", @ANYRES32=r19, @ANYBLOB="040004000000000008000c00", @ANYRES32=r20, @ANYBLOB="08000200", @ANYRES32=r21, @ANYBLOB="10000200000000002000010000000000"], 0x54, 0x2) r22 = syz_open_procfs(0x0, 0x0) read(r22, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r22, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r25 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r26) r27 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r29) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r30) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r23, @ANYBLOB="02002750c4f70200000094011000", @ANYRES32=r24, @ANYBLOB="02000800", @ANYRES32=r26, @ANYBLOB="02000100", @ANYRES32=r28, @ANYBLOB="040004000000000008000c00", @ANYRES32=r29, @ANYBLOB="08000200", @ANYRES32=r30, @ANYBLOB="10000200000000002000010000000000"], 0x54, 0x2) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r33 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r34) r35 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000300)) fchown(0xffffffffffffffff, 0x0, r37) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r38) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r31}, {0x2, 0x0, r32}, {0x2, 0x8, r34}, {0x2, 0x1, r36}], {0x4, 0x4}, [{0x8, 0xc, r37}, {0x8, 0x2, r38}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x2) getgroups(0x7, &(0x7f0000000100)=[0x0, 0xee00, r11, 0xffffffffffffffff, r20, r30, r38]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) 08:35:13 executing program 0: prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_open_procfs(0x0, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000180)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000240)='./file1\x00', 0x15b800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)={0x0, 0x6, [@dev, @link_local, @dev, @empty, @local, @remote]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) getsockname$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000280)=0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x3cf, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b58a8000000080004000000000028f4ef560fa34551518ed0395f3b7feded4a7bbd7d38dc6649f026d856f578df6562e8fcae7a862b67b668cc6d1b7e026099cfae171f5f501de13ae53dc7dcc5bab80a9cb6204795edc6b5a997b9c11317f181cd80166f76f5d4a8412bfdd1aab39cf34fd9e84f37008ac6f886160aa68c0c0cfb6bae0134d5cd0d1b404e65712804d6e4b943976ea17d6df9dffc29b216d3ff0ba1347f47e41f4de9e98d466b4a87cee5b48bb4159acbd343e61f116bf8acc3d560eb8e5bd9a41c45615b8b00"], 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket(0x0, 0xa, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) dup(0xffffffffffffffff) 08:35:13 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 272.314311][T10011] FAT-fs (loop4): bogus number of reserved sectors [ 272.348956][T10011] FAT-fs (loop4): Can't find a valid FAT filesystem 08:35:13 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 272.450473][ T26] audit: type=1800 audit(1573979713.690:35): pid=10028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=24 res=0 08:35:13 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:13 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) getsockopt$packet_buf(r1, 0x107, 0x13, &(0x7f0000651000)=""/240, &(0x7f0000000100)=0x483) 08:35:13 executing program 2: writev(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0040, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0xffffff15) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000440)="f38465a12ffe71080696cfd7254c6003d2560284820723bf3999d525c40d26c4c924e1660e99fd9a1aff221f5c9c6ab376b5cc6a64747798e4fa710a77228267f70b455f5d2e5fe8c4aa243733a4540f0add97adaa146724c9fc9e321806136d9593c94966", 0x65) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x300, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280)=0x4, 0x4) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x40000) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = getpid() ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000001c0)=r5) add_key$user(0x0, &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000580), 0x0, r2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 08:35:14 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:14 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x12703, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) getresuid(&(0x7f0000000000)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) setfsuid(r5) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_open_procfs(0x0, &(0x7f0000272000)) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000180)=0x0) sched_getaffinity(r7, 0x8, &(0x7f00000001c0)) 08:35:14 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x80, 0x0) dup2(r2, r3) 08:35:14 executing program 1: r0 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0xc0347c03, &(0x7f0000000000)) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_gstrings={0x8}}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r1, 0x9, 0x95f, "2e037b127529d4102437142b8e795ceed3b16463c37747dd08d45fd277c21656d4e211eac5e7e2ba9fd929a2b5bb31fb861ac83cbff71f3ba8b093b5cc7f5a68df0c4beddf1144215e47a3181c35767a45eb8a2b1675cb363a894a8eceda4eefacec3a95deab193d88f460"}) 08:35:14 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x10, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x1c, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x8, 0x40) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@remote}}, {{@in6=@ipv4}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) r4 = syz_open_procfs(0x0, 0x0) read(r4, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r8) r9 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r11) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r12) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r5}, {0x2, 0x0, r6}, {0x2, 0x8, r8}, {0x2, 0x1, r10}], {0x4, 0x4}, [{0x8, 0xc, r11}, {0x8, 0x2, r12}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x2) r13 = syz_open_procfs(0x0, 0x0) read(r13, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r17) r18 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r20) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r21) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r14, @ANYBLOB="02000000", @ANYRES32=r15, @ANYBLOB="0856a40952073b02", @ANYRES32=r17, @ANYBLOB="02000100", @ANYRES32=r19, @ANYBLOB="040004000000000008000c00", @ANYRES32=r20, @ANYBLOB="08000200", @ANYRES32=r21, @ANYBLOB="10000200000000002000010000000000"], 0x54, 0x2) r22 = syz_open_procfs(0x0, 0x0) read(r22, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r22, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r25 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r26) r27 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r29) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r30) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r23, @ANYBLOB="02002750c4f70200000094011000", @ANYRES32=r24, @ANYBLOB="02000800", @ANYRES32=r26, @ANYBLOB="02000100", @ANYRES32=r28, @ANYBLOB="040004000000000008000c00", @ANYRES32=r29, @ANYBLOB="08000200", @ANYRES32=r30, @ANYBLOB="10000200000000002000010000000000"], 0x54, 0x2) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r33 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r34) r35 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000300)) fchown(0xffffffffffffffff, 0x0, r37) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r38) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r31}, {0x2, 0x0, r32}, {0x2, 0x8, r34}, {0x2, 0x1, r36}], {0x4, 0x4}, [{0x8, 0xc, r37}, {0x8, 0x2, r38}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x2) getgroups(0x7, &(0x7f0000000100)=[0x0, 0xee00, r11, 0xffffffffffffffff, r20, r30, r38]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) 08:35:14 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 273.143061][T10055] bond0: (slave bond_slave_1): Releasing backup interface 08:35:14 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = socket$unix(0x1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:14 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) socket$unix(0x1, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 273.431679][ T26] audit: type=1800 audit(1573979714.670:36): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16699 res=0 08:35:14 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) socket$unix(0x1, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:14 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x10, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x1c, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x8, 0x40) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@remote}}, {{@in6=@ipv4}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) r4 = syz_open_procfs(0x0, 0x0) read(r4, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r8) r9 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r11) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r12) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r5}, {0x2, 0x0, r6}, {0x2, 0x8, r8}, {0x2, 0x1, r10}], {0x4, 0x4}, [{0x8, 0xc, r11}, {0x8, 0x2, r12}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x2) r13 = syz_open_procfs(0x0, 0x0) read(r13, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r17) r18 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r20) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r21) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r14, @ANYBLOB="02000000", @ANYRES32=r15, @ANYBLOB="0856a40952073b02", @ANYRES32=r17, @ANYBLOB="02000100", @ANYRES32=r19, @ANYBLOB="040004000000000008000c00", @ANYRES32=r20, @ANYBLOB="08000200", @ANYRES32=r21, @ANYBLOB="10000200000000002000010000000000"], 0x54, 0x2) r22 = syz_open_procfs(0x0, 0x0) read(r22, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r22, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r25 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r26) r27 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r29) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r30) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r23, @ANYBLOB="02002750c4f70200000094011000", @ANYRES32=r24, @ANYBLOB="02000800", @ANYRES32=r26, @ANYBLOB="02000100", @ANYRES32=r28, @ANYBLOB="040004000000000008000c00", @ANYRES32=r29, @ANYBLOB="08000200", @ANYRES32=r30, @ANYBLOB="10000200000000002000010000000000"], 0x54, 0x2) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r33 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r34) r35 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000300)) fchown(0xffffffffffffffff, 0x0, r37) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r38) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r31}, {0x2, 0x0, r32}, {0x2, 0x8, r34}, {0x2, 0x1, r36}], {0x4, 0x4}, [{0x8, 0xc, r37}, {0x8, 0x2, r38}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x2) getgroups(0x7, &(0x7f0000000100)=[0x0, 0xee00, r11, 0xffffffffffffffff, r20, r30, r38]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) 08:35:14 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) socket$unix(0x1, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 273.764828][ T26] audit: type=1800 audit(1573979715.000:37): pid=10090 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="loop5" ino=25 res=0 [ 273.928148][T10062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.194479][T10091] bond0: (slave bond_slave_1): Releasing backup interface [ 274.464671][T10093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 08:35:15 executing program 2: writev(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xc0040, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0xffffff15) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000440)="f38465a12ffe71080696cfd7254c6003d2560284820723bf3999d525c40d26c4c924e1660e99fd9a1aff221f5c9c6ab376b5cc6a64747798e4fa710a77228267f70b455f5d2e5fe8c4aa243733a4540f0add97adaa146724c9fc9e321806136d9593c94966", 0x65) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x300, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000280)=0x4, 0x4) add_key$keyring(0x0, &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r2, 0x0) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x40000) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x3}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = getpid() ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000001c0)=r5) add_key$user(0x0, &(0x7f0000000640)={'syz', 0x0}, &(0x7f0000000580), 0x0, r2) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 08:35:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000280)=""/91, 0x5}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x3}, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000001340)='/dev/udmabuf\x00', 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick=0x92, {}, {}, @quote}], 0xff33) getpid() sched_getaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00'}) r4 = dup3(r2, r3, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0xfffffffffffffffe, 0x0) r7 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r7, 0xc0347c03, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000001480)={@in={{0x2, 0x4e21, @multicast1}}, 0x0, 0x5, 0x0, "aee60749b5c130c4ba138c41846931c025ab7ecacd22af9291100e1cd63f0b9c75c269e3c3c661499bd5d491aa97c357bd10eae79932563164932806f94b656664af802ea966eb5dd19d498f599ef47b"}, 0xd8) ioctl$SG_EMULATED_HOST(r6, 0xc0347c03, &(0x7f0000000000)) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000000)={r10, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000001380)={0x4, 0x1, 0x7093, 0x3ff, r10}, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x14, r11, 0x9e06a2c5f40bff55, 0x0, 0x0, {0xe}}, 0x14}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000001440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x24000}, 0xc, &(0x7f0000000200)={&(0x7f0000001300)={0x20, 0x0, 0x8731b027fc9c083a, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4) 08:35:15 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)) r0 = socket$unix(0x1, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) 08:35:15 executing program 5: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x10, 0x0) syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fchdir(r0) r1 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f'}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x1c, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x8, 0x40) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000840)={{{@in6=@remote}}, {{@in6=@ipv4}, 0x0, @in=@remote}}, &(0x7f0000000000)=0xe8) r4 = syz_open_procfs(0x0, 0x0) read(r4, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r8) r9 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r11) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r12) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r5}, {0x2, 0x0, r6}, {0x2, 0x8, r8}, {0x2, 0x1, r10}], {0x4, 0x4}, [{0x8, 0xc, r11}, {0x8, 0x2, r12}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x2) r13 = syz_open_procfs(0x0, 0x0) read(r13, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r17) r18 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r20) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r21) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r14, @ANYBLOB="02000000", @ANYRES32=r15, @ANYBLOB="0856a40952073b02", @ANYRES32=r17, @ANYBLOB="02000100", @ANYRES32=r19, @ANYBLOB="040004000000000008000c00", @ANYRES32=r20, @ANYBLOB="08000200", @ANYRES32=r21, @ANYBLOB="10000200000000002000010000000000"], 0x54, 0x2) r22 = syz_open_procfs(0x0, 0x0) read(r22, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r22, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r25 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r26) r27 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r29) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r30) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000000010002000000000002000400", @ANYRES32=r23, @ANYBLOB="02002750c4f70200000094011000", @ANYRES32=r24, @ANYBLOB="02000800", @ANYRES32=r26, @ANYBLOB="02000100", @ANYRES32=r28, @ANYBLOB="040004000000000008000c00", @ANYRES32=r29, @ANYBLOB="08000200", @ANYRES32=r30, @ANYBLOB="10000200000000002000010000000000"], 0x54, 0x2) read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@initdev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) lstat(0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) r33 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r33, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setreuid(0x0, r34) r35 = socket(0x8000400000000010, 0x200000003, 0x0) getsockopt$sock_cred(r35, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000300)) fchown(0xffffffffffffffff, 0x0, r37) getresgid(&(0x7f0000000180), &(0x7f0000000280)=0x0, &(0x7f00000003c0)) fchown(0xffffffffffffffff, 0x0, r38) lsetxattr$system_posix_acl(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f00000006c0)={{}, {0x1, 0x2}, [{0x2, 0x4, r31}, {0x2, 0x0, r32}, {0x2, 0x8, r34}, {0x2, 0x1, r36}], {0x4, 0x4}, [{0x8, 0xc, r37}, {0x8, 0x2, r38}], {0x10, 0x2}, {0x20, 0x1}}, 0x54, 0x2) getgroups(0x7, &(0x7f0000000100)=[0x0, 0xee00, r11, 0xffffffffffffffff, r20, r30, r38]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000600)='4', 0x4100) 08:35:15 executing program 4: open(&(0x7f00000014c0)='./file0\x00', 0x9dde35dc5e86ccde, 0x0) mount(&(0x7f0000000180)=@md0='/dev/md0\x00', &(0x7f0000002a00)='./file0\x00', &(0x7f0000000000)='exfat\x00', 0x2000000, 0x0) [ 274.661866][ T26] audit: type=1800 audit(1573979715.900:38): pid=10106 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16698 res=0 [ 274.711253][T10113] [EXFAT] trying to mount... 08:35:16 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x2172, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001840)) r0 = socket$unix(0x1, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x3) [ 274.743950][T10113] ------------[ cut here ]------------ [ 274.822917][T10113] [EXFAT] No bh, device seems wrong or to be ejected. [ 274.860719][T10113] WARNING: CPU: 0 PID: 10113 at drivers/staging/exfat/exfat_blkdev.c:62 bdev_read+0x258/0x2b0 [ 274.871022][T10113] Kernel panic - not syncing: panic_on_warn set ... [ 274.877802][T10113] CPU: 0 PID: 10113 Comm: syz-executor.4 Not tainted 5.4.0-rc7+ #0 [ 274.885727][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 274.895798][T10113] Call Trace: [ 274.899182][T10113] dump_stack+0x197/0x210 [ 274.903528][T10113] ? bdev_read+0x220/0x2b0 [ 274.907956][T10113] panic+0x2e3/0x75c [ 274.911861][T10113] ? add_taint.cold+0x16/0x16 [ 274.916563][T10113] ? __kasan_check_write+0x14/0x20 [ 274.921695][T10113] ? __warn.cold+0x14/0x35 [ 274.926132][T10113] ? bdev_read+0x258/0x2b0 [ 274.930565][T10113] __warn.cold+0x2f/0x35 [ 274.934822][T10113] ? bdev_read+0x258/0x2b0 [ 274.939259][T10113] report_bug+0x289/0x300 [ 274.943603][T10113] do_error_trap+0x11b/0x200 [ 274.948211][T10113] do_invalid_op+0x37/0x50 [ 274.952644][T10113] ? bdev_read+0x258/0x2b0 [ 274.957134][T10113] invalid_op+0x23/0x30 [ 274.961313][T10113] RIP: 0010:bdev_read+0x258/0x2b0 [ 274.966350][T10113] Code: ff df 80 3c 02 00 0f 84 51 ff ff ff 4c 89 e7 e8 de 9c 39 fc e9 44 ff ff ff e8 c4 30 fe fb 48 c7 c7 20 20 3d 88 e8 a0 62 cf fb <0f> 0b eb 8a e8 bf 9b 39 fc e9 17 fe ff ff e8 f5 9b 39 fc e9 99 fe [ 274.985973][T10113] RSP: 0018:ffff88809ac27ad0 EFLAGS: 00010282 [ 274.992061][T10113] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 275.000174][T10113] RDX: 000000000002c7ab RSI: ffffffff815cf8a6 RDI: ffffed1013584f4c [ 275.008165][T10113] RBP: ffff88809ac27b10 R08: ffff88808e710640 R09: ffffed1015d06159 [ 275.016283][T10113] R10: ffffed1015d06158 R11: ffff8880ae830ac7 R12: 0000000000000000 [ 275.024273][T10113] R13: ffff88805ae40000 R14: 0000000000000001 R15: 0000000000000200 [ 275.032280][T10113] ? vprintk_func+0x86/0x189 [ 275.036907][T10113] sector_read+0x156/0x1e0 [ 275.041354][T10113] exfat_fill_super.cold+0x4d6/0xdba [ 275.046935][T10113] ? exfat_read_root+0x8d0/0x8d0 [ 275.051970][T10113] ? vsprintf+0x40/0x40 [ 275.056168][T10113] ? wait_for_completion+0x440/0x440 [ 275.061482][T10113] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 275.067324][T10113] ? set_blocksize+0x2bf/0x340 [ 275.072116][T10113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 275.074231][ T3906] kobject: 'loop3' (0000000008b970ca): kobject_uevent_env [ 275.078375][T10113] mount_bdev+0x304/0x3c0 [ 275.089974][T10113] ? exfat_read_root+0x8d0/0x8d0 [ 275.094941][T10113] exfat_fs_mount+0x35/0x40 [ 275.099465][T10113] ? exfat_remount+0x50/0x50 [ 275.104070][T10113] legacy_get_tree+0x108/0x220 [ 275.108858][T10113] vfs_get_tree+0x8e/0x300 [ 275.113294][T10113] do_mount+0x1369/0x1b60 [ 275.117639][T10113] ? copy_mount_string+0x40/0x40 [ 275.122609][T10113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 275.128866][T10113] ? _copy_from_user+0x12c/0x1a0 [ 275.133829][T10113] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 275.137975][ T3906] kobject: 'loop3' (0000000008b970ca): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 275.140085][T10113] ? copy_mount_options+0x2e8/0x3f0 [ 275.140107][T10113] ksys_mount+0xdb/0x150 [ 275.140123][T10113] __x64_sys_mount+0xbe/0x150 [ 275.140141][T10113] do_syscall_64+0xfa/0x760 [ 275.140161][T10113] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 275.140173][T10113] RIP: 0033:0x45a639 [ 275.140186][T10113] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 275.140193][T10113] RSP: 002b:00007ff6dbddcc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 275.140206][T10113] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a639 [ 275.140214][T10113] RDX: 0000000020000000 RSI: 0000000020002a00 RDI: 0000000020000180 [ 275.140222][T10113] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 275.140229][T10113] R10: 0000000002000000 R11: 0000000000000246 R12: 00007ff6dbddd6d4 [ 275.140237][T10113] R13: 00000000004c71c0 R14: 00000000004dc948 R15: 00000000ffffffff [ 275.152109][T10113] Kernel Offset: disabled [ 275.253064][T10113] Rebooting in 86400 seconds..